session 2026-07-28 afternoon: PENDING-81/-82 closed — the jurist reads the substrate

Filed: session record + Symmetria ledger (11 returns), MEMORY.md demote-on-promote
(morning session archived verbatim to MEMORY-reference.md), 7 KG lines (4 drift
patterns incl. 'a check cannot be written in the medium of the thing it inspects',
1 good-direction, app-memory-as-second-cache, governance-mcp), 4 skill-harvest
proposals, canonical app-preferences.md in sync with the app as of this wrap.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WuMjg3ipEVa3n8CoSzoyvc

claude/memory/MEMORY.md

@@ -60,7 +60,7 @@ permalink: claude-memory/memory
 - [Be (laundromat)](project-be-laundromat.md) — canonical Be tracker (est. 2026-06-08). Be = Skemantix startup (Seb+David) funding CapableMind's ladder; **bridge, not venture**. Decisions LOCKED (entity/pricing/infra in file); a11y gate MERGED. **Pre-revenue WTP gate = renovate Pat → charge her; discipline: no new spec until it clears → nothing for executor on be.** Repo @ `f43a0fd`.
 
 ## Active Session
-- [Session 2026-07-28 morning — the governance block closed, and the parser that defined its own blind spot](session-2026-07-28-morning-governance-block-closed-and-the-parser-that-defined-its-own-blind-spot.md) — **Session 1 = governance, bounded and CLOSED as scheduled.** Yesterday's literal question answered: *not* two deletions and a pointer — the **weld test** (run the proposal's own refinement back at smallest-editable-unit granularity) found **11 of 15 units carry doctrine**, 3 with no standing carrier, incl. **L130**, the conflict rule the eval credited with the guardrail. Both PENDING-76 and the extraction **priced a decomposition as a relocation**. Legs A/B/C drafted→steward-applied: §MemPalace → **§Memory Discipline** (7 units preserved verbatim-in-force, tool roster + hook claim dropped) · 2 rules hoisted · §Active Projects → a pointer. **Drift 9→7→3→0**, each step predicted then confirmed. REVIEWED-76 (withdrawn after remand) /-77/-79/-80 placed. **⚑ Worst error was mine:** my splitter's parser defined an item as `^## PENDING-<digits>` — the file holds **93 items in 5 families**, 20 invisible, **10 of them OPEN**; *every* check passed because all inherited the blind spot; the lone signal was `grep`=77 vs Python=67, nearly dismissed. Restored `cmp`-identical, rebuilt (item = any `## `), 12 controls ⇒ **1848→327 lines, 74 archived, 19 open, lossless proven regex-free**. **BUILT:** `wake-digest.py` (computed-never-cached, 0.31s/~980 tok, replaced a **5-month-stale** SessionStart handoff; session start **~135k→~14k**) · drift-check **§6** doctrine-ids (**active: 7 defined / 0 dead**) · `--brief` for the jurist. **The `.app` answer is structural:** its reader has no filesystem ⇒ its state can only be **cached**; duplication is *required*, only staleness is optional. **Cowork RETIRED** — `coworkUserFilesPath` = `~/Claude` (**does not exist**); and it would give the jurist *an agent's testimony*, not visibility. **PULLING THREAD: the jurist's map** — PENDING-81's two legs, then Chamber V1. Detail in the session file.
+- [Session 2026-07-28 afternoon — the jurist got eyes, and a second cache appeared](session-2026-07-28-afternoon-the-jurist-got-eyes-and-a-second-cache-appeared.md) — **The governance block is CLOSED: PENDING-81 + -82 ruled, applied, verified.** The jurist now **reads the substrate** — `governance-mcp.py`, 5 read-only tools (`governance_item(id)` = verbatim any item/ruling), 29 controls, install **proven from Claude.app's own logs** (2× "started and connected"; live). Four refusals designed in: read-only (AST-audited), **domain = enum not paths**, one imported parser, tool-not-agent. Preferences **rebuilt as repair not rewrite** (steward pasted the live text): 12 doctrine sections proved **byte-identical**, 4 sections added, §Standing Context tiered 3 ways (generated Projects · **Live questions** — *phrased as questions because a status claim decays* · steward-held Personal). **REVIEWED-78/81/82 placed ⇒ 18→15 open**, all 15 dormant Mar–May. Cowork **not a party** (steward). `CLAUDE.md` L27 = *principal **ethics** architect + co-author* — note the conflict resolved **in favour of the document no instrument watches**: currency ≠ authority. **⚑ First find: `8abfe88` claimed "+ archive" and never staged it** — 1,532 lines deleted, destination absent, pushed; repaired `7f6157a` after a union check (positive control) that also caught an **unlogged header rewrite**. `[FIX]` `item_spans()` **fence-aware** (0 behaviour change; the trigger is the steward's own fenced drafting). **The morning's question ANSWERED by walking into it 4×:** a grep matching its own token list, then the git half doing it again *inside the fix*, a diff filter excluding `- ` list items, and a negative check run without establishing my instrument covered the domain ⇒ **a check cannot be written in the medium of the thing it inspects.** **⚑⚑ THE FINDING THAT OUTRANKS THE DAY:** Claude.app's **memory system** is a *second* cache of project state, retrieved mid-answer, that **no instrument here can read or audit** — unlike §Standing Context it cannot be *seen* drifting; our only lever is self-report, the channel we distrust. `[HARDENING]` parked. **PULLING THREAD: Chamber V1's purpose** — which now also decides what that unauditable cache should hold. Detail in the session file.
 
 ## Historical reference → MEMORY-reference.md
 Older archived-session pointers and the stable reference layer (steward profile · project-state detail · L1/L2/Chamber inventories · legacy pending-work · reference-file list) live in [MEMORY-reference.md](MEMORY-reference.md) — consult on demand; not loaded at wake. Recent cross-session trajectory comes from the Active Session entry above + the recent `session-*.md` files (wake §2.b.1; the MemPalace `handoffs` glance was retired 2026-07-07 with the wind-down).