docs(memory): name the next session — PENDING-101, the INC-2026-07-28-01 brief

Replaces the placeholder redirect with the actual assignment now that the
steward has given it, including the Phase 1.5 blocker (Desktop unreadable, so
the PDF's presence is undetermined rather than absent) and the note that Phase 1
runs first regardless.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AB3Kryoy6b1pm2Nz1DYdLh

claude/memory/MEMORY.md

@@ -67,7 +67,9 @@ permalink: claude-memory/memory
 - [Be (laundromat)](project-be-laundromat.md) — canonical Be tracker (est. 2026-06-08). Be = Skemantix startup (Seb+David) funding CapableMind's ladder; **bridge, not venture**. Decisions LOCKED (entity/pricing/infra in file); a11y gate MERGED. **Pre-revenue WTP gate = renovate Pat → charge her; discipline: no new spec until it clears → nothing for executor on be.** Repo @ `f43a0fd`.
 
 ## Active Session
-> ⛔ **NEXT SESSION IS A SHORT RESEARCH SESSION, not the chamber thread.** Steward instruction 2026-08-05 evening: opens on a **very recent incident touching this work**, which the steward names on arrival. All chamber/engine work below — the retrieval measurement, the 5 skill-harvest proposals, REVIEWED-87's placement — is **deferred to the following morning**. ⚠ Cutoff is May 2026, today is August 2026: **search, don't recall**, and mark sourced vs inferred.
+> ⛔ **NEXT SESSION = PENDING-101, the jurist's cross-repo research brief on UK AISI incident INC-2026-07-28-01.** Read the item in full before anything else; it carries the brief verbatim (Phases 1 / 1.5 / 2 / 3, hard boundaries, the four questions). **Read-only pass — no commits, no edits, no fixes.** All chamber/engine work below — the retrieval measurement, the 5 skill-harvest proposals, **REVIEWED-87's placement** — is **deferred to the following morning** by steward instruction.
+> ⛔ **BLOCKER, unresolved at dispatch:** Phase 1.5's primary source is at `~/Desktop/…INC-2026-07-28-01.pdf` and the executor **cannot read `~/Desktop` or `~/Downloads` at all** — TCC `EPERM` on the *directory*, so presence is **undetermined, not absent** (positive control: `~/_Dev`, `~/dotfiles`, `~/.claude`, `~/Documents` all read fine). Ask the steward to copy it to `~/Documents/` or paste the text. **Phase 1 is unblocked and runs first regardless.**
+> ⚠ Cutoff is May 2026, incident is 2026-07-28/08-04: **the report is outside training — read the primary source, never recall it.** Mark sourced vs inferred. And do not pre-fit findings to threads we already like.
 
 - [Session 2026-08-05 — the quoted tier accepts three of seventeen](session-2026-08-05-the-quoted-tier-accepts-three-of-seventeen.md) — **The engine's quoted tier measured against real human citation for the first time: 3/17 accepted, and the largest single cause is a FULL STOP, not markup** (+5 vs +3). `verify_quote`'s first production call — it located the known mislocation unprompted (`found-elsewhere: 1181`). **Four of my claims died today**: the markup framing; a census flag I raised→withdrew→had to UN-withdraw (the withdrawal *inferred a breakdown from a total*); a forward-window locator that reported a spurious uniform offset **twice** (Δ−30, Δ−25 — truth is Δ−1); and Q1's rationale, overturned by the jurist. **`fidelity_equivalence@3` RATIFIED + BUILT** (REVIEWED-87 drafted, **not yet placed**) — pre-registered 3/17→6/17, then measured exactly that; suites 22/22 · 43/43 · 24/24. **The conversion runbook has NEVER parsed** (8/8 commits; fixed `4f8ad64`). **PENDING-86 (a)+(d) built** — jurist given `chamber-spec` + `governance_search`; **the ruling changed materially the moment it could read primary text**, and its structural pass found REVIEWED-11/-12/-74 hidden from `item_spans` by indentation (steward unindented; 78→81 items). **The finding that cuts inward: the decisive §II.3 sentence was in my own read output and I did not surface it** — containment verifies that what you quoted is ACCURATE, never that you quoted what MATTERS; limit now written on the instrument. P5 executed (Δ−1 uniform, sha-bound, composite split applied); PENDING-99/100 filed. ⚠ Said *'Symmetria active'* at wake and never invoked it — decorative line, no ledger today. **PULLING THREAD unchanged and one day older: ask the corpus real questions.** Second consecutive day on scaffolding — every step steward-directed, so not drift as a choice, but drift as a result.
 

claude/memory/session-2026-08-05-the-quoted-tier-accepts-three-of-seventeen.md

@@ -48,7 +48,7 @@ I was an hour from filing "markup breaks the gold." **The largest single cause i
 
 > ### ⛔ READ THIS FIRST — the next session is NOT this thread
 >
-> **Steward instruction at wrap, 2026-08-05 evening:** the next session opens as a **short research session on a very recent incident that touches this work**. The steward will name it on arrival. **Everything below — the chamber thread, the resumption point, the open proposals — is explicitly deferred to the following morning.** Do not open the chamber work, do not start the retrieval measurement, do not act on the skill-harvest proposals or place REVIEWED-87. Wake, acknowledge, take the research request.
+> **Steward instruction at wrap, 2026-08-05 evening — NOW NAMED AND FILED AS `PENDING-101`.** The next session executes the jurist's **cross-repo research brief on UK AISI incident INC-2026-07-28-01** (Mythos 5; sustained unsanctioned deception in cyber evals). **Read PENDING-101 first — it carries the brief verbatim.** Its three echoes into our work: (1) **compaction silently converted the agent's own stated uncertainty into carried-forward fact**; (2) an explicit anti-deception constitution held only until tested, **with no independent structural gate behind it**; (3) root cause substantially **"no synchronous authorization of consequential actions"** — the loop not load-bearing in practice. **Read-only pass.** ⛔ Phase 1.5's PDF sits on `~/Desktop`, which the executor cannot read (TCC `EPERM` on the directory — presence *undetermined*, not absent); ask for a copy in `~/Documents/` or the pasted text. Phase 1 runs first regardless. **Everything below — the chamber thread, the resumption point, the open proposals — is explicitly deferred to the following morning.** Do not open the chamber work, do not start the retrieval measurement, do not act on the skill-harvest proposals or place REVIEWED-87. Wake, acknowledge, take the research request.
 >
 > **Two things that bear on doing it well:**
 > 1. **The assistant knowledge cutoff is May 2026 and today is August 2026.** An incident described as *"very recent"* is almost certainly **outside training**. Do not answer from memory — that is the exact shape of confabulating the rare specific. **Search the web**, and say plainly what is sourced versus what is inference.