session 2026-07-29: REVIEWED-84 placed + PENDING-87 (order attestation) + PENDING-86 amended; spec v2.9.0 landed in chamber-library

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WuMjg3ipEVa3n8CoSzoyvc

PENDING.md

@@ -572,7 +572,18 @@ Q1, Q4, Q5 affirmed as filed; **Q4 on stronger grounds than argued** (REVIEWED-7
 **Tag:** [HARDENING]
 **Summary:** `governance_read` exposes `claude-md`, `pending`, `pending-archive`, `reviewed`, `app-brief` and `memory-index` — but not `chamber-library-specification.md`, so a constitutional supersession of §Tiering & Fence was ruled on by a party who could not read §Tiering & Fence.
 **Rationale:** Disclosed by the jurist unprompted at the head of the PENDING-83 ruling, which is the mechanism working: it corroborated the package's load-bearing quotes against REVIEWED-75/-72/-67 and PENDING-55 — genuinely independent of the package, but **one layer short of the primary substrate**, and said so rather than letting the ruling imply a check it had not made. The ruling's substance is unaffected; the standing arrangement is the problem. This is the same shape as the defect PENDING-83 repairs, one level up: an instrument reporting on a domain it does not reach. At present the only instrument reading the primary substrate for this class of package is **the executor's own verbatim self-check** — which is exactly what should not be sole, since that self-check caught a fabricated quote the executor had itself introduced into the Grounding section of a package about verification.
-**Options:** (a) add the chamber constitution (and `graduation-spec.yaml`) to `governance_read`'s document keys, read-only, alongside the existing six; (b) keep the jurist repo-blind by design and require every package to carry a mechanical verbatim-containment proof over its quoted clauses, reported in the package; (c) both.
-**Recommendation:** (c). (a) removes the gap for the documents the loop actually rules on and costs two keys on an already-built read-only server; (b) is worth keeping regardless, because self-containment is what makes a package rulable at all and the containment check has already proven it catches executor fabrication. They are complements, not alternatives.
-**Files affected:** `~/dotfiles/scripts/governance-mcp.py` (document keys). Extends PENDING-82.
+**Options:** (a) add the chamber constitution (and `graduation-spec.yaml`) to `governance_read`'s document keys, read-only, alongside the existing six; (b) keep the jurist repo-blind by design and require every package to carry a mechanical verbatim-containment proof over its quoted clauses, reported in the package; (c) both; (d) **[ADDED 2026-07-29, per the PENDING-87 ruling's process note]** a keyword **search** across `PENDING.md`/`PENDING-archive.md`/`REVIEWED.md`, not only keyed retrieval of documents whose IDs are already known.
+**Recommendation:** (c) **plus (d)**. (a) removes the gap for the documents the loop actually rules on and costs two keys on an already-built read-only server; (b) is worth keeping regardless, because self-containment is what makes a package rulable at all and the containment check has already proven it catches executor fabrication. They are complements, not alternatives.
+**Files affected:** `~/dotfiles/scripts/governance-mcp.py` (document keys; a search entry point for (d)). Extends PENDING-82.
 **Awaiting:** Steward authorization — it widens what the jurist can read, which is the steward's call, not the executor's.
+**Amendment 2026-07-29 (PENDING-87 / REVIEWED-84 process note, jurist-raised, not ruled):** a **second, independent** instance of this item's failure, and it sharpens the diagnosis. The jurist's REVIEWED-83 Q3 demanded an outcome REVIEWED-74 had already established was impossible — a ruling **four days older**, in a file the jurist *could* read, but had no reason to open, *"since nothing in the package I ruled on mentioned order or Eichmann at all."* So the gap is not only **"the jurist cannot read the constitution it design-gates"** but **"the jurist cannot discover a relevant prior ruling whose ID it does not already know."** Keyed retrieval cannot fix that; only search can — hence option (d). The jurist directed this be folded here rather than opened as a new item.
+
+## PENDING-87 — Order attestation: the REVIEWED-83 Q3 precondition is unsatisfiable as written
+**Date:** 2026-07-29
+**Tag:** [PROPOSAL]
+**Summary:** REVIEWED-83 Q3 requires a constructed column-order corruption *"run through the actual candidate reference-converter pair, confirming the guard flags it"* — but the guard is coverage-based and provably order-blind at block scale, so no extractor pair, however independent, can make it flag; the precondition should be reformulated as the position-sensitive comparison the Eichmann pilot §7 already names.
+**Rationale:** Two facts settle it, both measured 2026-07-29 and both quoted from the substrate in the package. (1) **Independence exists** — four PDF extractors with zero shared libraries by `otool`; docling recovers correct column order on an adversarial hand-authored two-column fixture (similarity 1.000) where poppler, MuPDF, PDFium and pdfminer all return content-stream order (0.550), byte-identical to poppler's documented `-raw`. So Q2's `held`-if-no-independent-pair fallback does not fire. (2) **The operator, not the pair, is the blocker** — running the repo's own `verify_body_conservation.classify` on a real canonical, a fully block-reversed text scores **100.00% match, 0 added, 0 interior lost, PASS** against a *correct* reference, while a token-level shuffle FLAGs at 0.00%. Coverage sees token-level disorder and is blind to block-level moves. This was already demonstrated on a real book (Eichmann pilot §7, 2026-07-19) and already dispositioned by the jurist 2026-07-24 as the standing Q3 order-blindness block gating the `verified` **stamp** rather than the door — **neither document was supplied to the jurist on 2026-07-28**, which is an executor self-containment failure, not a defect in the ruling. The measurement the reformulation needs is now in hand: order-concordance over shared k-grams separates clean from corrupted at **0.995–1.000 vs 0.117–0.411** (gap 0.583, zero overlap) across 33 book×extractor pairs, with content-overlap (0.551–0.982) orthogonal to it. A column probe over all 84 born-digital PDFs found **exactly one** predominantly two-column book, and it scores 0.995–0.999 clean — no false positive on the corpus's only real instance of the hazard.
+**Options:** (a) reformulate Q3 as the §7 position-sensitive extension, with the measurement above as its feasibility evidence; (b) take blocking condition (a)'s other ratified branch — *"an explicit, argued acceptance of eyeball-after-gate as the genuine ceiling"*; (c) waive Q3 and ratify V-DPDF without an order condition.
+**Recommendation:** (a), with (b) live. (c) is refused: it would leave the stamp attesting an order it never measured, which is the false-ABSTAIN shape PENDING-55 named — *a false ABSTAIN is as much a lie as a false PASS*. The evidence is strong enough to argue the mechanical route is feasible and weak enough that it does not yet earn ratification: the corruption is simulated by block-reversing docling's own output, the sample is 11 books at 40 interior pages rather than a census, and the executor's own synthetic-fixture prediction that real two-column books would false-flag was **refuted by measurement** and is corrected in the package.
+**Files affected:** none mutated. Package drafted at `chamber-library/docs/order-attestation-JURIST-PACKAGE-2026-07-29.md` (30/30 quoted passages verified by mechanical containment, positive and negative controls passing). All instruments scratchpad-only, wired to nothing. If ratified: a MINOR supersession of §Tiering & Fence + `graduation-spec.yaml` `order_attestation:` as declared data.
+**Awaiting:** Jurist design gate, then steward authorization.