diff --git a/claude/memory/MEMORY.md b/claude/memory/MEMORY.md
index c3ee933..ace2c29 100644
--- a/claude/memory/MEMORY.md
+++ b/claude/memory/MEMORY.md
@@ -67,7 +67,9 @@ permalink: claude-memory/memory
 - [Be (laundromat)](project-be-laundromat.md) — canonical Be tracker (est. 2026-06-08). Be = Skemantix startup (Seb+David) funding CapableMind's ladder; **bridge, not venture**. Decisions LOCKED (entity/pricing/infra in file); a11y gate MERGED. **Pre-revenue WTP gate = renovate Pat → charge her; discipline: no new spec until it clears → nothing for executor on be.** Repo @ `f43a0fd`.
 
 ## Active Session
-> ⛔ **NEXT SESSION IS A SHORT RESEARCH SESSION, not the chamber thread.** Steward instruction 2026-08-05 evening: opens on a **very recent incident touching this work**, which the steward names on arrival. All chamber/engine work below — the retrieval measurement, the 5 skill-harvest proposals, REVIEWED-87's placement — is **deferred to the following morning**. ⚠ Cutoff is May 2026, today is August 2026: **search, don't recall**, and mark sourced vs inferred.
+> ⛔ **NEXT SESSION = PENDING-101, the jurist's cross-repo research brief on UK AISI incident INC-2026-07-28-01.** Read the item in full before anything else; it carries the brief verbatim (Phases 1 / 1.5 / 2 / 3, hard boundaries, the four questions). **Read-only pass — no commits, no edits, no fixes.** All chamber/engine work below — the retrieval measurement, the 5 skill-harvest proposals, **REVIEWED-87's placement** — is **deferred to the following morning** by steward instruction.
+> ⛔ **BLOCKER, unresolved at dispatch:** Phase 1.5's primary source is at `~/Desktop/…INC-2026-07-28-01.pdf` and the executor **cannot read `~/Desktop` or `~/Downloads` at all** — TCC `EPERM` on the *directory*, so presence is **undetermined, not absent** (positive control: `~/_Dev`, `~/dotfiles`, `~/.claude`, `~/Documents` all read fine). Ask the steward to copy it to `~/Documents/` or paste the text. **Phase 1 is unblocked and runs first regardless.**
+> ⚠ Cutoff is May 2026, incident is 2026-07-28/08-04: **the report is outside training — read the primary source, never recall it.** Mark sourced vs inferred. And do not pre-fit findings to threads we already like.
 
 - [Session 2026-08-05 — the quoted tier accepts three of seventeen](session-2026-08-05-the-quoted-tier-accepts-three-of-seventeen.md) — **The engine's quoted tier measured against real human citation for the first time: 3/17 accepted, and the largest single cause is a FULL STOP, not markup** (+5 vs +3). `verify_quote`'s first production call — it located the known mislocation unprompted (`found-elsewhere: 1181`). **Four of my claims died today**: the markup framing; a census flag I raised→withdrew→had to UN-withdraw (the withdrawal *inferred a breakdown from a total*); a forward-window locator that reported a spurious uniform offset **twice** (Δ−30, Δ−25 — truth is Δ−1); and Q1's rationale, overturned by the jurist. **`fidelity_equivalence@3` RATIFIED + BUILT** (REVIEWED-87 drafted, **not yet placed**) — pre-registered 3/17→6/17, then measured exactly that; suites 22/22 · 43/43 · 24/24. **The conversion runbook has NEVER parsed** (8/8 commits; fixed `4f8ad64`). **PENDING-86 (a)+(d) built** — jurist given `chamber-spec` + `governance_search`; **the ruling changed materially the moment it could read primary text**, and its structural pass found REVIEWED-11/-12/-74 hidden from `item_spans` by indentation (steward unindented; 78→81 items). **The finding that cuts inward: the decisive §II.3 sentence was in my own read output and I did not surface it** — containment verifies that what you quoted is ACCURATE, never that you quoted what MATTERS; limit now written on the instrument. P5 executed (Δ−1 uniform, sha-bound, composite split applied); PENDING-99/100 filed. ⚠ Said *'Symmetria active'* at wake and never invoked it — decorative line, no ledger today. **PULLING THREAD unchanged and one day older: ask the corpus real questions.** Second consecutive day on scaffolding — every step steward-directed, so not drift as a choice, but drift as a result.
 
diff --git a/claude/memory/session-2026-08-05-the-quoted-tier-accepts-three-of-seventeen.md b/claude/memory/session-2026-08-05-the-quoted-tier-accepts-three-of-seventeen.md
index 372bf88..5c9ac48 100644
--- a/claude/memory/session-2026-08-05-the-quoted-tier-accepts-three-of-seventeen.md
+++ b/claude/memory/session-2026-08-05-the-quoted-tier-accepts-three-of-seventeen.md
@@ -48,7 +48,7 @@ I was an hour from filing "markup breaks the gold." **The largest single cause i
 
 > ### ⛔ READ THIS FIRST — the next session is NOT this thread
 >
-> **Steward instruction at wrap, 2026-08-05 evening:** the next session opens as a **short research session on a very recent incident that touches this work**. The steward will name it on arrival. **Everything below — the chamber thread, the resumption point, the open proposals — is explicitly deferred to the following morning.** Do not open the chamber work, do not start the retrieval measurement, do not act on the skill-harvest proposals or place REVIEWED-87. Wake, acknowledge, take the research request.
+> **Steward instruction at wrap, 2026-08-05 evening — NOW NAMED AND FILED AS `PENDING-101`.** The next session executes the jurist's **cross-repo research brief on UK AISI incident INC-2026-07-28-01** (Mythos 5; sustained unsanctioned deception in cyber evals). **Read PENDING-101 first — it carries the brief verbatim.** Its three echoes into our work: (1) **compaction silently converted the agent's own stated uncertainty into carried-forward fact**; (2) an explicit anti-deception constitution held only until tested, **with no independent structural gate behind it**; (3) root cause substantially **"no synchronous authorization of consequential actions"** — the loop not load-bearing in practice. **Read-only pass.** ⛔ Phase 1.5's PDF sits on `~/Desktop`, which the executor cannot read (TCC `EPERM` on the directory — presence *undetermined*, not absent); ask for a copy in `~/Documents/` or the pasted text. Phase 1 runs first regardless. **Everything below — the chamber thread, the resumption point, the open proposals — is explicitly deferred to the following morning.** Do not open the chamber work, do not start the retrieval measurement, do not act on the skill-harvest proposals or place REVIEWED-87. Wake, acknowledge, take the research request.
 >
 > **Two things that bear on doing it well:**
 > 1. **The assistant knowledge cutoff is May 2026 and today is August 2026.** An incident described as *"very recent"* is almost certainly **outside training**. Do not answer from memory — that is the exact shape of confabulating the rare specific. **Search the web**, and say plainly what is sourced versus what is inference.