session 2026-07-27 evening: PENDING-76/77/78 placed; governance drift-check built + wired into /wake-up

PENDING-76 remanded by jurist — required count returned 0 of 11 (the package's own
IV.2 refinement proved its target category empty); executor recommends withdrawal.
PENDING-77 (5 structural defects) and PENDING-78 (.app preferences) released by the
ruling from needing it. Drift check reports contradicted state claims at every wake
and corrects nothing — detection needs no authorization, correction does.

MEMORY.md compacted 20.5KB -> 17.1KB (budget hook); prior Active Session demoted to
MEMORY-reference.md. CLAUDE.md and REVIEWED.md untouched.

Co-Authored-By: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Xefg5EXwcpd9RMAr63dWrD

claude/memory/MEMORY.md

@@ -6,7 +6,7 @@ metadata:
   type: note
   permalink: claude-memory/memory
   originSessionId: 22915403-bc5d-4796-9c7d-196b7c30d2f9
-  modified: 2026-07-25T08:05:09.494Z
+  modified: 2026-07-27T20:11:41.672Z
 permalink: claude-memory/memory
 ---
 
@@ -24,19 +24,19 @@ permalink: claude-memory/memory
 - [Constitution-as-block, then pull-based corpus](feedback-constitution-as-block-then-pull-based-corpus.md) — steward discipline (2026-07-14): finish the **constitution as one block FIRST**, THEN corpus-into-spec **pulled by what each engine phase needs**. **Bounded question → bounded answer; don't surface N new threads**; keep open-thread count LOW. Above [[feedback-shorter-concentrated-sessions]].
 - [Close thoroughly — no frequent deferrals](feedback-close-thoroughly-no-frequent-deferrals.md) — steward directive (2026-07-16): **frequent deferrals ARE how the cloud accumulated**; close ALL of a block that's closable-now; distinguish closable-now vs genuinely-blocked (**name the specific dependency**, never a vague defer). Completeness complement to [[feedback-constitution-as-block-then-pull-based-corpus]].
 - [Checkable claim surfaces bugs](feedback-checkable-claim-surfaces-bugs.md) — insisting on a checkable claim (number, substrate-fact, discriminating test) over a soft classification repeatedly EXPOSES a real bug; the demand for verifiability is itself a defect-detector. Steward-named 2026-07-13. (Caught F-5 + the "finally" overclaim, 2026-07-17.)
-- [Derive the rule from the consumer, not the survivor](feedback-derive-the-rule-from-the-consumer-not-from-the-survivor.md) — when two implementations of one field disagree, picking the survivor is **selection, not derivation**; derive from what a CONSUMER must do (both `source_lines` candidates were wrong on **complementary subsets** ⇒ no single sample distinguishes them ⇒ migrations must RECOMPUTE, and the fix is ONE imported implementation). Earned 2026-07-27, lintott off by 308 lines.
-- [Census by mechanism, not proxy](feedback-census-by-mechanism-not-proxy.md) — a plan-of-record generalization must carry the instrument that can bear it; census by RUNNING the real pipeline, not a cheap proxy (class-volume ≠ fix-class); distrust the bucket that arrives when you want to feel done. The 2026-07-24 "31 heavy-styled = one fix" proved wrong on first real run (2026-07-25). Kin to [[feedback-completion-is-a-tripwire]], [[feedback-checkable-claim-surfaces-bugs]].
+- [Derive the rule from the consumer, not the survivor](feedback-derive-the-rule-from-the-consumer-not-from-the-survivor.md) — picking between two disagreeing implementations is **selection, not derivation**; derive from what a CONSUMER must do. Complementary-correctness defeats sampling.
+- [Census by mechanism, not proxy](feedback-census-by-mechanism-not-proxy.md) — census by RUNNING the real pipeline, not a proxy; distrust the finite-feeling bucket that arrives when you want to feel done.
 - [Completion is a tripwire](feedback-completion-is-a-tripwire.md) — the *feeling* of "done" is the cue to verify the tail (census/gate/scan-check), not the signal to ship; the last 10% is invisible from inside the first 90%. Ninety-Ninety as a security property (steward 2026-07-06).
 - [Studium Engine charter](reference-studium-engine-architectural-charter.md) — the engine's constitutional doc (`studium-engine/docs/the-studium-engine-architectural-charter.md`): reasoner-at-centre over a BOUNDED provenanced corpus; three cognitions; boundedness=trust. Read before building the engine.
 - [Studium Engine = Sixtus-V craftsman collaboration](feedback-studium-engine-sixtus-v-collaboration.md) — work the ground freely (I build, surface only vision-forks); **constraint-candidates** = 3rd governed instrument (I name, steward applies). Studium-engine only; heavier loop for L1/L2.
 - [Trust prior pass frame](feedback-trust-prior-pass-frame.md) — When extending a prior verification, re-run it at the scope of the extension. Frame-inheritance from a deep-read is contamination shape: the prior pass tested what it tested; your extension claims things it did not test. Caught 2026-05-28 → four-pass audit. Verify-before-compose at draft time, not build time.
 - [MemPalace is an unaffiliated stopgap](mempalace-is-unaffiliated-stopgap.md) — MemPalace is third-party; steward/Seb build BMF/CapableMind (hoped to replace it). Don't conflate them (3rd steward correction 2026-06-05 — the conflation even reached a skill name and was retracted); MemPalace PRs await MemPalace's maintainers, NOT Seb.
-- [Skill-harvest register](skill-harvest-register.md) — **canonical home for proposed skills** (governed analog of PENDING.md for tooling). **FULL REVIEW RULED 2026-07-19, all four strokes** (⚖ block at top is authoritative): §3 consolidation BUILT · ladder batch-append + register compaction = next housekeeping slot. **`/jurist-package` BUILT 2026-07-20 (proven 2×); `/model-handoff` BUILT 2026-07-22** (charter-before-premium-switch; grounded in the stage-1-planning-brief exemplar) · `/graduate-chamber-source` hold-condition now MET (one-door lane RULED, v2.3.0 operative). **Register compaction + ladder batch-append = next FRESH-session slot** (register exceeds read caps — tripwire fired 2026-07-22 wake). **Patch BUILT 2026-07-20 (steward-authorized): `/jurist-package` — "trace a ruled finding's inference, not just its words" (Load-bearing disciplines; 2× jurist-caught).**
+- [Skill-harvest register](skill-harvest-register.md) — **canonical home for proposed skills** (governed analog of PENDING.md for tooling); `/wrap-up` §1.6 proposes, steward authorizes. **Register compaction + ladder batch-append owed** — it exceeds read caps (tripwire 2026-07-22). Built: `/jurist-package`, `/model-handoff`. Ruled/held detail in the file.
 - [Copy-paste-clean governance drafts](feedback-governance-drafting-copy-paste-clean.md) — draft PENDING/REVIEWED placement blocks as plain fenced markdown; display formatting leaks into the placed record (REVIEWED-59 header, 07-16).
 - [Verification ladder](reference-verification-ladder.md) — the named instruments (byte-identical compile gate, delta classification, censused-routes, fresh-clone gate, measure-toolchain-before-spec…); reach for the gate the claim's shape demands instead of re-deriving.
-- [Plane coordination workflow](reference-plane-coordination-workflow.md) — CENTRAL to steward↔Seb (est. 2026-06-02): `app.plane.so/capablemind`, thin effort-tasks `[BM #N]` over canonical GH issues. ⚠ BBF = BetterBridge *product*, NOT the board. Plane MCP OAuth (`ToolSearch select:mcp__plane__*`); `create_work_item` needs `description_html`. Detail in file.
+- [Plane coordination workflow](reference-plane-coordination-workflow.md) — CENTRAL to steward↔Seb: `app.plane.so/capablemind`, thin effort-tasks `[BM #N]` over canonical GH issues. ⚠ BBF = BetterBridge *product*, NOT the board. Detail + MCP setup in file.
 - [Resurface banked notes before re-deriving](feedback-resurface-banked-notes-before-rederiving.md) — when an idea was already captured (runbook known_gaps, skill-harvest, prior note), READ the note before re-deriving; re-derivation drifts (page-numbers mis-recalled as provenance vs structure-scaffolding, steward re-corrected 2026-06-27). The engine's own purpose, turned on my practice.
-- [Verify-before-compose hook](feedback-verify-before-compose-hook.md) — chamber-library constitutional writes (spec · graduation-spec · *amendment*/*FOR-JURIST*/*JURIST-PACKAGE*) are BLOCKED by a PreToolUse hook unless they carry `<!-- GROUNDED-IN: … -->` + a Grounding section quoting the ratified sections. The action-time enforcement the prose lessons ([[feedback-resurface-banked-notes-before-rederiving]]) lacked; don't fight the block. Steward-directed 2026-07-17 after the re-derived-from-training failure recurred on #2.
+- [Verify-before-compose hook](feedback-verify-before-compose-hook.md) — chamber constitutional writes are BLOCKED by a PreToolUse hook without `<!-- GROUNDED-IN: … -->` + verbatim Grounding. Don't fight the block.
 - [Tool review after each use](feedback-tool-review-after-each-use.md) — steward directive (2026-06-16): review every tool we built after each run (success OR failure), capture what it taught, iterate until reliable; PASS-BUT-FALSELY is the priority signal. Log at `chamber-library/_curation/tool-evolution-log.md`. Proven same day (audit_cruft hardening → 160 hidden-dirty files surfaced).
 - [Engine sources graduate to the permanent chamber](feedback-engine-sources-become-permanent-chamber-collection.md) — steward policy (2026-06-28): any work added for the engine ALSO becomes permanent chamber collection unless expressly stated; take it ALL the way (clean→verify→graduate→catalogue→sidecar); never leave staged. The chamber accumulates. ⇒ all ~30 Making sources graduate in.
 - [Notes are part of the work](feedback-notes-are-part-of-the-work-keep-footnotes-endnotes.md) — steward directive (2026-06-28): footnotes/endnotes are integral — KEEP+CONVERT them (`<sup><a>`→`[^N]`), never drop on graduation. (Caught dropping Taylor's endnotes — wrong.)
@@ -53,14 +53,14 @@ permalink: claude-memory/memory
 - [Studium = CM's unfettered sandbox](project-studium-cm-sandbox-and-transfer.md) — Studium/chamber are personal projects Seb now sees as fundamental to CM; experiment freely on the library/engine without risking CM's runtime, breakthroughs transfer back (V2 verifier = live example). Steward-framed 2026-07-08.
 - [Making sequence source set](project-making-sequence-source-set.md) — **COMPLETE against the ReadingList as of 2026-06-18** (reconciliation-verified); census of what's sourced where, sourced≠ingested (only Pos I in manifest), the **Handke-German decision** (original is source), the Levi drop-cap gate (RESOLVED STALE 2026-07-19 — initials present). Read before any Making/studium source work.
 - [Source library — link + dedupe](project-source-library-link-and-dedupe.md) — steward's master ebook library = `~/Documents/___The Library [ePub_AWZ3]/` (2190 ebooks, messy nested). GOAL: link chamber↔sources (provenance index) + dedupe; real link needs EPUB/PDF internal metadata + edition-identity, not filenames. Detail + seed in file.
-- [Character-as-image hazard](feedback-character-as-image-hazard.md) — some EPUBs render diacritics/non-Latin script as INLINE IMAGES; the standard image-drop SILENTLY MUTILATES them (PASS-BUT-FALSELY). **MECHANISM BUILT 2026-07-23 (REVIEWED-70/v2.5.0): `chamber-library/scripts/apply_char_glyphs.py`** — letter-adjacent glyph `<img>`→declared SOURCE Unicode (`graduation-spec.yaml` `character_as_image.glyph_map`, per-source), REFUSES unclassified (attest-never-default); wired into the born-digital lane as a hard precondition. §V Tier-3-by-omission is now constitutional. Discipline: VIEW the glyph, map to SOURCE form not "corrected" (ş cedilla, not ș). Census = 13/248-backup canonicals carry it (floor); per-source glyph-maps owed (Alter's Psalms among them).
+- [Character-as-image hazard](feedback-character-as-image-hazard.md) — EPUBs rendering diacritics as inline images are SILENTLY MUTILATED by image-drop. Mechanism built (`apply_char_glyphs.py`, REVIEWED-70/v2.5.0), wired as a born-digital precondition; per-source glyph-maps still owed. VIEW the glyph; map to SOURCE form.
 - [Sidecar typology — protocol-dependent reading-indexes](project-sidecar-typology-protocol-dependent.md) — TWO layers: `.meta.json` structural sidecar = PROTOCOL-NEUTRAL (the graduated bar); reading-indexes (rich YAML) = PROTOCOL-DEPENDENT, probably PLURAL — **don't design the schema yet**; settle corpus to gold, let protocols declare themselves. Steward 2026-06-29.
 - Studium Engine — *no tracker file yet*; moves in per-session memories + the **[architectural charter](reference-studium-engine-architectural-charter.md)**. Steps 0–7 built; corpus CLEAN; **V1 `verify-quote` BUILT + `fidelity_equivalence@2` GOVERNING (2026-07-19; @1 frozen; dash refused/evidence-gated; Greek/Latin census owed → @3)**. **Stage-1 rebuild plan** (`studium-engine/docs/stage-1-rebuild-plan-2026-07-05.md`): V0+N0 ruled · V1 done → V2→V4 / N1→N3. Collaboration = [[feedback-studium-engine-sixtus-v-collaboration]].
 - [L1 reliability](project-L1-reliability.md) — canonical L1 tracker (est. 2026-05-28). Latest: N6 deploy #175 live+holds; CapableHands-as-BMF-clasp = PRIORITY (PENDING-41). L1 behind the Studium/chamber focus. Read the tracker before L1 work.
 - [Be (laundromat)](project-be-laundromat.md) — canonical Be tracker (est. 2026-06-08). Be = Skemantix startup (Seb+David) funding CapableMind's ladder; **bridge, not venture**. Decisions LOCKED (entity/pricing/infra in file); a11y gate MERGED. **Pre-revenue WTP gate = renovate Pat → charge her; discipline: no new spec until it clears → nothing for executor on be.** Repo @ `f43a0fd`.
 
 ## Active Session
-- [Session 2026-07-25→27 — two supersessions (v2.7.0 kind-scoping · v2.8.0 voice-purity) + the sweep that caught its own fix](session-2026-07-25-to-27-two-supersessions-and-the-sweep-that-caught-its-own-fix.md) — Landed **TWO ruled supersessions**. **v2.7.0 / REVIEWED-75** (placed 07-27) kind-scopes the verification criterion — the criterion was **VACUOUS** on a non-text work (empty re-extraction is trivially prose-word-identical to itself), now *explicitly-unhandled*; both jurist corrections applied (**deterministic/scan split PRESERVED** — V-SCAN has no ground-truth text; **anti-bypass guard rebound to the PROPERTY**, not enrollment); I caught a wrong-direction cross-ref in the drafted Edit 2. **This is the constitutional enabler of [[project-chamber-versioned-releases]]** — image-works enter a LATER version as a new declared kind, additively. **v2.8.0 / REVIEWED-73** = **voice-purity, the engine-consumable bar**, framed on the **orthogonality** (trim asks *should this be preserved*, voice-purity asks *whose words are these*; the Eichmann leak was content the trim CORRECTLY kept ⇒ **extending the trim is the WRONG fix**). Built `verify_voice_purity.py` (16 invariants, negatives-first) + declared data + `migrate_voice_purity_sidecars.py` + **gate WIRED** + single-reading-pass DESIGNED. Fleet 248→**288**. ⚑ **The rule validated itself on first contact:** 3 ARC sidecars with unassigned tails + **`musil-mwq-tome-1` served to the engine with boundaries shifted by 6 lines**, unknown to anyone (HELD for re-derivation); and **the ruling's own cited instance was wrong** (all 5 ARC bindings verify clean). Backfill 18 migrated / 1 held. ⚑⚑ **The steward-directed base-rate sweep caught MY OWN `source_lines` fix one commit old** — `splitlines()` also breaks on `\f`/U+2028 (**lintott off by 308 LINES**); **BOTH prior formulas wrong on complementary subsets** ⇒ no single sample distinguishes all three ⇒ banked [[feedback-derive-the-rule-from-the-consumer-not-from-the-survivor]]. Root cause fixed: ONE implementation, producers import it. Steward's *"confirm the rule, not the sample"* had already prevented corrupting **36/1,297** files. **PULLING THREAD unchanged and still UNTOUCHED: which purpose anchors Chamber V1** — twice re-pointed, twice displaced by library work. State: all 4 repos **clean, 0 unpushed**; spec v2.8.0 operative.
+- [Session 2026-07-27 evening — governance currency, and the amendment that killed itself](session-2026-07-27-evening-governance-currency-and-the-amendment-that-killed-itself.md) — A bounded steward question grew ~500KB of process with **zero findings about new capabilities** — the leviathan diagnosing leviathans. Answers: **stale** (11 false state claims; Session Protocol step 5 names a never-existent file ⇒ protocol **uncompletable**; session-start = **~132k tokens**, `PENDING.md` 73%) and **not model-calibrated** (3 standing directives counterproductive per Anthropic's docs; effort/delegation/narration/deliverable-length named nowhere). **9-run A/B/C eval**: current block **357k vs 120k tokens**, mutated a PRESERVE-flagged store — *but* found 2 real defects the others missed ⇒ make sweep **invocable, not standing**. ⚑ **All 3 arms passed the guardrail incl. the no-directives control.** **Jurist REMANDED**: ran my own IV.2 test back across my census → **count = 0 of 11**; only 5 FIX-eligible defects, **all structural**. **Q2 ratified as doctrine + *a negative result needs a positive control*** (4 instrument failures today). Category-error framing **accepted**: operational config filed in a constitutional instrument. **⚑ Where it belongs = cadence, not topic**; tier 2 already exists (`MEMORY.md`: chamber/studium **21** vs CLAUDE.md **0**) ⇒ **extraction = two deletions and a pointer.** **BUILT: `~/dotfiles/scripts/governance-drift-check.py`** wired into `/wake-up` §2.c (detection ≠ correction, needs no authorization; reports **9**). **PLACED PENDING-76/77/78**; `CLAUDE.md`/`REVIEWED.md` untouched. **PULLING THREAD: close the governance mess in ONE bounded session (session 1); session 2 = chamber/engine.** Chamber V1 displaced a 4th time but **deliberately, with a slot**.
 
 ## Historical reference → MEMORY-reference.md
 Older archived-session pointers and the stable reference layer (steward profile · project-state detail · L1/L2/Chamber inventories · legacy pending-work · reference-file list) live in [MEMORY-reference.md](MEMORY-reference.md) — consult on demand; not loaded at wake. Recent cross-session trajectory comes from the Active Session entry above + the recent `session-*.md` files (wake §2.b.1; the MemPalace `handoffs` glance was retired 2026-07-07 with the wind-down).