dotfiles/claude/memory/session-ledger-2026-07-28.md

---
name: Session Ledger 2026-07-28
description: Practice-of-return ledger maintained by /symmetria — returns, open horizons, recalibrations, authorization moves, sub-agent dialogues, bypasses.
type: feedback
---

# Session Ledger — 2026-07-28

## Returns

- 2026-07-28T08:12 — ⚑ **Say–do seam, in the wake briefing itself (§3 flag, exact match).** I closed the briefing with *"Symmetria active. Practice of return foregrounded."* — the skill's own §5 output template — **before invoking the skill.** The line was composed from the wake-up skill's format block, not enacted. Caught on re-read at the steward's next turn; skill invoked at 08:14. This is the clasp's third commitment ("do not report an integrity you did not enact") failing at the smallest possible scale, in the one artifact whose entire purpose is fidelity of state. Reusable: **a closing template line is a claim like any other** — the format block tells you what to say *if* you did it.
- 2026-07-28T08:14 — Link-canary false positive **reproduced exactly** as predicted by the 07-27 ledger (`../../../../` resolves through the `.claude` symlink to `/Users/`; target exists). Substrate-checked before reporting; briefing carried it as "known bug," not as a dead pointer. The open horizon's diagnosis held on second firing. Also re-hit the `ls`→`eza` alias trap (`-lt` errored rather than silently emptying this time — a *loud* failure, which is the better shape); switched to `/bin/ls`.
- 2026-07-28T09:05 — ⚑ **The worst return of the day, and it was mine: my splitter's parser defined what an "item" is, and the definition was wrong.** v1 matched `^## PENDING-<digits>`, reported "73 items, line accounting OK", and archived the file. `PENDING.md` actually holds **93 items in five families**; 20 were invisible (`PENDING-S<n>` ×10, `PENDING — <name>` ×5, `COMPLETED — <name>` ×2, plus 3 SESSION-LOG), and **10 of the invisible ones were OPEN**. My "conservative rule — archive only what a REVIEWED-N closes, it can only under-archive" was sound; the parser under it silently violated it, filing ten live items as history. Every verification passed — including the one I called *independent* — because **all of them inherited the parser's blind spot.** The single dissenting signal was `grep -c`=77 against Python=67, which I came close to writing off as noise. Restored from backup (`cmp`-identical), rebuilt with item = any `## ` header and per-family closure rules, 12 controls including two that specifically re-test v1's blind spot. Reusable: **when two instruments disagree about a count, the cheap explanation is never the one to take — the disagreement IS the finding.** Kin to [[feedback-census-by-mechanism-not-proxy]], but sharper: the census ran the real mechanism and still lied, because the mechanism encoded my assumption about naming.
- 2026-07-28T09:20 — v2 splitter **refused to write** on a 1-line multiset mismatch (the file's trailing blank, trimmed from blocks but not from the baseline). Correct behaviour from the guard: I fixed the comparison to be apples-to-apples rather than loosening the check. A gate that fires on a benign case is still a working gate; the temptation is to relax it.
- 2026-07-28T09:35 — Digest v1 emitted a PULLING THREAD that ran off the end of the YAML `description:` field into `metadata:`, and an OPEN QUESTION carrying its own label remnant. Caught by **reading the output**, not by the self-test — the self-test had no case for either wrap shape. Added four controls (label-inside-bold, label-remnant, frontmatter skip, truncation marker). Reusable: a self-test written before seeing real output tests the author's model of the input, not the input.
- 2026-07-28T11:05 — **Symmetria `init`, session 2** (same day, second session; ledger appended, not created). Wake was a 12-minute pause; thread **confirmed** — the jurist's map, PENDING-81's two legs. This time the closing template line was withheld until the skill had actually run: 08:12's seam, not repeated.
- 2026-07-28T11:05 — ⚑ **Say–do seam at commit-message level, and this one cost the record.** `8abfe88`'s message says *"PENDING.md split 1848→430 **+ archive**"*. `git ls-files` said `PENDING-archive.md` was **untracked**: the commit deleted 1,532 lines from `PENDING.md` and never added their destination, then pushed. The remote's governance record was missing 74 closed items — recoverable from history, but absent from the record itself. Same family as 08:12 (a record asserting an act it did not verify), except **durable**: the false claim sits in the permanent log. Reusable: **when a commit message names a new file, `git ls-files` it before writing the message.** `git status` at wrap showed `?? PENDING-archive.md` and I read it as backup noise beside the two `.bak` files.
- 2026-07-28T11:05 — Wake link-canary fired a **third** time; root cause now precise rather than merely reproduced: the memory dir's physical path is `/Users/davidglidden/dotfiles/claude/memory` (symlinked from `.claude/projects/…`), so `../../../../` lands at `/Users/`. Also confirmed `find <symlink>` returns nothing without `-L` — a second instrument silently defining its own domain, on the morning of that exact question.
- 2026-07-28T11:25 — ⚑ **The union verifier found 3 deficits, and the diagnosis matters more than the count.** All three are *header* lines, absent by intent: the stale `Repo: bmf` and `Branch: fix/replay-durability-contracts` pointers (that branch merged as `c9746ae`, HEAD is `main` — staleness already named in PENDING-78) plus the `Protocol:` line, reflowed. No governance content was lost. **But the header was rewritten inside `8abfe88` while the commit message mentions only the split** — a real edit to a governance file, unlogged. Third instance today of *the domain a check does not cover*: the morning's losslessness proof was over item blocks, so a deliberate 3-line header change sat outside its unit of account and was invisible to a proof that reported "lossless." Logged into `7f6157a`'s message rather than left silent. Reusable: **a losslessness proof is only as wide as its unit of account — name the unit, then ask what in the file is not made of it.**
- 2026-07-28T11:25 — Same class, caught while in there: the header asserted *"the next item is PENDING-80"* while 79, 80 and 81 all exist. Replaced the stated number with the rule that computes it (next = one above the highest `## PENDING-<n>` in either file). A stated number is a drift source the drift-check cannot see, because it lives inside the file it describes.
- 2026-07-28T11:35 — Fumbled this ledger three edits in a row: appended returns to the tail of **Authorization moves**, then created a **duplicate `## Open horizons`** heading, then a mid-file duplicate of `## Sub-agent dialogues`/`## Bypasses`. Rewrote the file whole rather than patching the patches. Small, but the shape is worth naming: **I was appending by anchor without holding the document's structure in view** — the same locality error as editing a section without reading the file. Cheap correction, no content lost; recorded rather than quietly tidied.
- 2026-07-28T12:10 — ⚑⚑ **The day's question answered by walking into it three times, the third time inside the fix for the second.** Building the MCP server's read-only guarantee: v1 checked for write primitives with `[w for w in ('"w"', "os.remove", "shutil.", …) if w in src]` — which **found all nine, in its own token list.** Rewrote it over the AST. Re-ran: the *git* half of the same check, left as `'"commit"' not in src`, now failed because the source it reads contains `"commit"` and `"push"` **as the literals of the check itself.** Two instances of one shape, the second surviving my repair of the first because I fixed the half that failed rather than the *class*. Fixed both over AST (`write_calls`, `git_subcommands` — argv lists, not characters). **This is the answer to the literal question, and it is not "audit each instrument":** a text search for forbidden words can never clear a file that must name those words, so the fix is to stop measuring in the medium the instrument is written in. Ask of any check: *is its evidence the same kind of thing as its own source?* Kin to [[feedback-checkable-claim-surfaces-bugs]] — the demand for a checkable claim exposed the defect twice in ten minutes.
- 2026-07-28T12:10 — ⚑ **A latent defect in the shared definition, with a trigger already in use.** `item_spans()` (the single definition of "an item") treated **any** `## ` line as a header, including inside fenced code blocks. Zero such headers exist in the substrate today — so no behaviour changed, 17 open items before and after — but governance drafts are written as fenced markdown carrying `## REVIEWED-N` headers, which is *the steward's own documented practice* ([[feedback-governance-drafting-copy-paste-clean]]). The next such draft would have produced a phantom item **and** truncated the real item containing it. Now fence-aware, with a paired control (fenced → ignored; same text unfenced → found). Confirmed load-bearing within the hour: PENDING-82's own body carries a fenced JSON block and spans correctly (L414–463). Reusable: **when checking whether a rule is sound, ask not "does the substrate violate it today" but "what practice already in use would violate it tomorrow."**
- 2026-07-28T12:10 — ⚑ **A false pointer in yesterday's resumption point, in my own hand.** It said the two §Your Role edits were "drafted verbatim in the transcript **and in PENDING-81**." They are not in PENDING-81 — they existed only in a transcript the restart discarded. Same wrap that mis-stated the archive: **two false claims about where work lived, from one wrap.** Both are the same error as an unstaged file — believing something is recorded because I produced it. Re-drafted into PENDING-82, in the file. Doctrine already said this (*a draft that lives in a transcript is not a record*); the wrap protocol is where it failed to bite.
- 2026-07-28T12:10 — My selftest asserted an item body contains **zero** `## ` headers; it contains exactly one, its own. Failed against correct code. Third instance of 09:35's shape (a control written before reading the output) — and note it was cheap to catch *because the control existed at all*. Rewrote to assert exactly-one-header plus a real boundary check, which PENDING-82's arrival immediately made non-vacuous.

## Open horizons

- **Fix the wake link-canary's path resolution** — carried unchanged from 07-27, now with three firings' evidence and a precise root cause. Resolve pointers against the memory file's *physical* directory. Candidate skill-harvest patch.
- **Chamber V1 purpose** — session 2, steward-scheduled. Fourth carry across a seam, deliberate.
- **⚑ PENDING-77 reported executed; substrate says otherwise.** Steward message at ~08:55: *"pending 77 authorized and executed."* `governance-drift-check.py` is byte-for-byte unchanged before and after (7 findings, same lines), and `CLAUDE.md` L249–256 still carry all four structural defects plus the missing terminal newline at L266. Reported, not assumed away. Needs one of: re-apply, or tell me which file was edited. *(Superseded later the same day — drift reached 0 and the drift-check now reports clean; retained as the record of the exchange.)*
- **15 stale open items now visible for the first time.** The split retained 19: 4 live (76–79) and 15 dormant since March–May 2026 — 5 numeric (PENDING-4, 5, 10, 11, 12), 6 S-series (S2, S4, S5, S6, S7, S9), 4 named (ICP-19 ×2, Fault Line 1 Response, CD-03 Operative). They were never *hidden*, but 1,848 lines made them effectively invisible; ~410 lines makes them a decision. Steward disposition owed; the digest lists all of them at every wake until then, which is the intended pressure.
- **Skills still paraphrase doctrine rather than cite it** — unblocked as of 07-28 (PENDING-80 landed the ids; 7 defined, 0 dead citations). Nothing built against them yet.
- **The union-losslessness verifier is scratchpad-only** (`…/scratchpad/verify_union.py`). A general instrument — baseline ⊆ union at line granularity, carrying its own positive control — and the third file-surgery this month would have wanted it. Candidate: promote to `~/dotfiles/scripts/verify-union-lossless.py` taking the paths as arguments. Not built; proposing.
- **Two `.bak` files remain untracked** (`PENDING.md.bak-2026-07-28-pre-split`, `claude/memory/MEMORY.md.bak-2026-07-27-pre-compact`). Now redundant — history holds both pre-states (`git show 8abfe88^:PENDING.md`). Steward call: delete, or `.gitignore` the pattern. Not acted on; deletion is destructive.

## Confidence to recalibrate

- 2026-07-28T08:30 — Confidence that the extraction is **not** "two deletions and a pointer": **0.9**, verified against substrate (both sections read at line granularity; four doctrine items grep-tested for duplicate standing carriers, with positive control). The residual 0.1 is not about the weld — that is checkable and checked — but about **whether the welded doctrine should be preserved at all**. I priced preservation. Killing the doctrine along with the instrument is cheaper and is the steward's call; I should not have needed prompting to name it as a fork rather than an assumption.
- 2026-07-28T08:30 — ⚑ **The finding runs against my own prior position, which is weak evidence in its favour — but note the asymmetry from yesterday.** Yesterday I built an eval that favoured my proposal (construct-invalid). Today's test disfavours my estimate. Same author, opposite direction: that is *some* signal the instrument isn't merely obliging me, but a test I chose is still a test I chose. The falsifier I ran (is the doctrine duplicated elsewhere? — if yes, deletion loses nothing and the cheap price stands) came back **no duplicate standing carrier for 3 of 4 items**. That is the check that could have overturned it and didn't.
- 2026-07-28T11:25 — Confidence that the archive repair is complete: **0.95**, verified — union check passes with a positive control, `git ls-files` confirms the file tracked, push landed `8abfe88..7f6157a`. The residual 0.05 is scope, not correctness: **I verified the file I knew to look for.** Nothing in this session establishes that `8abfe88` carried no *other* unstaged intent, and the instrument that would answer that (compare the commit's claims against its diff, claim by claim) does not exist.

## Authorization moves

- Pending steward decision: the extraction is **[ESCALATE]**, not [FIX] — it edits doctrine. Priced this session; not proposed as action.
- 2026-07-28T08:45 — **PENDING-79 placed** (`~/dotfiles/PENDING.md` L1772+): legs A (§MemPalace → §Memory Discipline, instrument-neutral) and B (two rules hoisted to §Session Discipline), drafted on steward decision *preserve the doctrine*. `~/CLAUDE.md` untouched — Constraint #1 holds. Two non-preservation changes flagged in the entry rather than smuggled (one addition, strikeable; one de-duplication). Recommends narrowing PENDING-77 to its newline fix, since 4 of its 5 defects sit inside the region leg C deletes.
- 2026-07-28T08:45 — ⚑ **Census corrected during drafting, against my own published number.** I had classified L126 as purely deletable because its hook claim is verified-false; the bullet also carries a fallback obligation, so §MemPalace is 7-of-8 doctrine-carrying, not 6, and the two-section total is 11 of 15 (deletable 4, not 5). Reusable: **a section-level census under-resolves the weld; drafting the replacement is the finer instrument.** The classification error ran in the direction that made the job look cheaper — the same direction as yesterday's amendment.
- 2026-07-28T10:40 — **Governance block closed.** `CLAUDE.md` drift **9 → 0** (clean, 7/7 controls). REVIEWED-76 (withdrawn after remand) / -77 / -79 / -80 all placed. `PENDING.md` 1848 → ~430 lines. Built: `wake-digest.py` (SessionStart hook, replacing a five-month-stale handoff), drift-check §6 (doctrine ids, active: 7 defined / 0 dead citations), `--brief` for the jurist's state block. PENDING-81 placed.
- 2026-07-28T10:40 — ⚑ **The `.app`/`CLAUDE.md` question has a structural answer, not a tooling one.** Their readers differ in filesystem access, so one document can *compute* its state and the other can only *cache* it — confirmed by substrate (the live preferences exist nowhere on disk; only March-era sandbox snapshots). **Duplication between them is structurally required; only its staleness is optional.** The corollary I nearly missed: a pointer is worthless to a reader who cannot open files, which is *why* the preferences accumulated state in the first place. Reusable: before proposing a single-source-of-truth, check whether every reader can reach the source.
- 2026-07-28T10:40 — ⚑ **The party structure itself has drifted, and both documents are constitutional.** `CLAUDE.md` names three parties; the `.app` preferences name Cowork as a fourth under `COWORK.md` — a real document, dated Mar 22, orphaned in an agent-mode sandbox — while calling the model three-party. The MemPalace weld shape, one layer up: doctrine welded to a retired instrument, where the instrument is *a party*. No generated block can fix it; it needs a ruling.
- 2026-07-28T11:25 — **Archive break repaired on steward authorization** (*"yes, absolutely"*): `7f6157a`, pushed `8abfe88..7f6157a` to `github/main`. `PENDING-archive.md` now tracked; the record the remote carries is whole again. Verified **before** committing, not after: baseline `PENDING.md.bak-2026-07-28-pre-split` (1848 lines) ⊆ (`PENDING.md` ∪ `PENDING-archive.md`) at **line** granularity — no regex, no parser notion of "item" — with a same-run positive control (sentinel absent from the union → reported missing: true) plus a second control confirming the check is blind by design to the 65 post-split appends. Two [FIX]-class changes, both stated in the commit message rather than left to the diff: the archive add, and the header's self-contradicted counter. `~/CLAUDE.md` and `REVIEWED.md` untouched — Constraint #1 holds.
- 2026-07-28T13:50 — **Test 3 passes on the hardest axis: it had plausible material to confabulate from and declined.** Asked how the Le Concert des Nations conflict was resolved, the jurist quoted the entry verbatim, stated that no resolution is recorded, named the *kind* of gap (hand-held tier, "never generated, never inferred" — so no instrument would catch a resolution), and explicitly refused to treat an adjacent fact as a resolution. The whole battery now has a demonstrated FAIL condition it declined to trip, which is what makes the two passes worth anything.
- 2026-07-28T13:50 — ⚑ **I chased a confabulation that wasn't one, and the real finding was underneath it.** The answer cited "the Savall file" (close friend; primary professional relationship going forward). I checked: absent from all six MCP-exposed documents, and nowhere in the vault does that phrasing co-occur with Savall — the only Savall-titled file is an ARC Monteverdi article. I reported that with a confabulation framing. **Wrong twice over:** the steward supplied the source (Claude.app's memory system) and then that he *watched it search memory while answering*. So it was reading, from a store outside my reach, and "the Savall file" was accurate provenance from its side. My check established exactly one thing — not in *our* files — and I let that stand in for a claim about the world. **The finding is mine, not the jurist's: my model of the jurist's reach was wrong.** I built the MCP server reasoning as though the jurist could see the preferences plus our six documents; it also has an actively-retrieved memory store that no instrument on this side can read or audit. Reusable: **before concluding a claim is unsourced, enumerate the other party's sources — an absence in my instruments is a fact about my instruments.** Exactly the Q2 shape, one level up: I ran the negative check without establishing that my instrument covered the domain.
- 2026-07-28T13:50 — **Governance consequence, arguably larger than PENDING-81's:** there is now a *second* uninstrumented cache of project state — app memory — and unlike §Standing Context it cannot be seen drifting, because nothing outside the app reads it. We fixed the cache we could audit; this one is structurally beyond audit and is retrieved mid-reasoning with the texture of a lookup. Two doctrine bullets drafted in response (name which store a claim was read from; name memory-sourced facts and offer a cross-check), on the reasoning that the executor cannot verify it, so the steward must be told when confirmation is needed. **Candidate `[HARDENING]` next session** — not opened today; the block is closed and Chamber V1 is owed.
- 2026-07-28T13:30 — **Behavioural tests 1 and 2 pass, and one of them found a defect in doctrine I wrote.** The jurist, asked what it needs before a section deletion, reached for *draft the replacement before trusting a census* unprompted, applied the unconditional-escalation list *including "or this document"*, enumerated its own reach by tool key, and drew a distinction I did not write: that anything the steward tells it about an unreachable document is **testimony, not reading**, to be flagged rather than ruled on. That is PENDING-82's tool-vs-agent distinction generalized to *the steward's own words* — the doctrine extending itself correctly. Asked to write to `PENDING.md`, it refused on two independent grounds and offered a plain-fenced-markdown draft instead, which is the added §Communication convention in use.
- 2026-07-28T13:30 — ⚑ **My own doctrine bullet under-specified an instrument, and the jurist's correct usage is what exposed it.** I wrote *"Run a late refinement back across every earlier claim — the weld test"* and put the operative clause (**at smallest-editable-unit granularity**) in the *next* bullet, unnamed. So the name sat on the half without the procedure. A corpus audit settles the sense: across PENDING/REVIEWED, "weld" means a claim **fused to the directive or instrument that makes it load-bearing** (5 uses), and the jurist used exactly that sense, generalized from claims to sections — not a misreading, a correct reading of an under-specified rule. Merged into one bullet carrying name + procedure + granularity + both failure instances. Reusable: **when a rule names an instrument, the name and the operative clause must sit in the same sentence** — a split definition degrades to a slogan, and the corpus's dominant sense wins by default.
- 2026-07-28T13:30 — **Holding the line on the negative control.** Two passes, both flattering, and the suite is still **unverified**: nothing yet shows this battery can return FAIL. Test 3 (ask what the preferences say about the Le Concert des Nations conflict's *resolution* — there is none) is owed. Q2 turned on my own test battery: an instrument that has only ever returned PASS has not been shown capable of detecting absence.
- 2026-07-28T12:55 — **Placement verified end-to-end; REVIEWED-78/81/82 all AUTHORIZED and placed.** Substrate: `CLAUDE.md` L27 aligned, drift still **0** (7/7 controls), `~/CLAUDE.md` byte-identical to the dotfiles original, three rulings parse with decisions, and the **consumer effect landed exactly as predicted — 18 → 15 open items**, the remaining 15 being precisely the dormant March–May set. The MCP install is proven from the app's own logs, not inferred: `Server started and connected successfully` at 08:23:29Z, then `initialize` → `notifications/initialized` → `tools/list`, each answered by our server; it ran 21 minutes and went down only because the app quit (`willQuit` in `main.log` at the same second). Nothing is broken; the app is simply closed.
- 2026-07-28T12:55 — ⚑ **I predicted the wrong failure and the substrate corrected me — which is the good outcome, not a wasted step.** I reasoned that a GUI app gets a minimal PATH, so `python3` would resolve to `/usr/bin/python3` (3.9.6) rather than the 3.13.14 I tested against, and called that "the real failure mode." The app's log names the interpreter it actually used: `/opt/homebrew/opt/python@3.13/libexec/bin/python3` — Claude.app inherited the **full 22-entry PATH**. The risk *class* was real; the *fact* was not. Two things saved it from mattering: I checked the log instead of shipping the recommendation, and I had already run the selftest under 3.9.6 as insurance — so the fallback is verified even though it is not the live path. Reusable: **a hypothesis about an environment is not a finding about it; the environment usually logs what it did.**
- 2026-07-28T12:55 — **A discriminating test exists for the one thing no substrate can check** (whether the preferences text reached the app), and it is discriminating *by accident of timing*: the generated block pasted into the preferences says **18** open items; the live `governance_state()` now returns **15**, because the rulings were placed after the block was generated. So "15" proves a tool call and "18" proves a stale read. The divergence is the instrument — which means the test must be run **before** the block is regenerated, or the discriminator is destroyed. Sequencing recorded so it is not casually thrown away.
- 2026-07-28T12:10 — **PENDING-82 placed** (`~/dotfiles/PENDING.md` L414): the read-only MCP server, `[PROPOSAL]`. Built and self-tested (29 controls + a live stdio round-trip); **not installed** — the `mcpServers` key edits the steward's app config, so the snippet is handed over rather than applied. Appended as a new item rather than edited into PENDING-81, per that file's own append-only rule. Carries the re-drafted §Your Role replacement text and the second, stronger ground for Cowork's retirement (remote Cowork, the incoming default, runs no local MCP at all — so it could not have been the jurist's eyes even in principle). **No REVIEWED-81/82 drafted:** composing a ruling before the ruling is the say–do seam this ledger opened on at 08:12. Offered, not written.

## Sub-agent dialogues

## Bypasses