August 11, 2026

The island had never been load-tested. All three were fatal or noisy and none were visible by reading.

ii-base and ii-phone each carried a 357-line BarContent to express eight differences, all of them either "is this widget shown" or "which slot is it in". No behaviour differed. Every bar edit had to be made twice or diverge silently against the pin.

Collector emits a single JSON envelope for every agent session (Souveraine, Claude Code, Codex) and always exits 0; a failing provider reports available:false rather than taking the envelope down.

Quickshell retains the failed QLocalSocket object, so toggling its requested state cannot reconnect. Replace the Socket body until the host answers.

Let the remote shell deploy accept the assets its caller already staged, so a successful composition does not fail after switching the tree.

One unreadable conversation.json aborted the whole listing, so hydration returned an error, the caller read it as no prior thread, and a fresh conversation opened on every boot. Skip the damaged record and warn.

`Message.content` was `String`, so an attachment could not reach the substrate even though everything downstream was ready for it: the session already stores `ContentBlock::Image`, `run_turn` already builds OpenAI multi-part content, and the provider client already speaks `image_url`. The whole pipe was plumbed and the tap was welded shut at the door.

~/souveraine on the build box is a full copy of this repo with no .git at all, newest sources 2026-08-09 21:07. Audited by hashing every file and querying this repo's object database: 1545 checked, ten unknown after excluding the vendored upower submodule.

write replaces a whole file and reported success identically whether the file grew, held, or was erased. Replacing an existing file now requires overwrite: true, and the refusal names append/edit as the likely intent. Every write returns a WriteDelta so the result carries magnitude; a write that drops a file below half its former size says so loudly.

Keep assistant, reasoning, tool-call, and tool-return frames structured through the sidebar delegate. Tool cards bind returns by wire id and fold their output by default.

A tool_call/tool_return arriving while a <think> block was open emitted its own self-closing fence, whose </think> closed the outer block early. Every reasoning token after that point rendered as prose, and the stray close left the trailing assistant text mis-segmented. Append inside the open fence instead; only open one when arriving in prose.

TASK-36 said the load path had never executed. It ran 2026-08-11 — LoadNanoappResponse decoded, success byte set, and six gauges came off a flat baseline at 2502 and 2990 against a 2500 floor. Recorded with Casey's numbers and the two things that would otherwise compress away: the margin carries intent, and the proximity veto is a separate job from the threshold.

Record update delivery as a per-body offer and local candidate activation after a live shell push killed an active conversation.

Reconciles the two owning docs with souveraine cfad688. Sub-scope A was always half-landed: the substrate was multimodal end to end and the HTTP door was text-only, so the TUI could see and every other surface was blind. The door opens; nothing walks through it yet.

Firefox extension and Bitwarden popups were rendered above their parent but absent from client hit testing, so every contact fell through to the toplevel beneath. Walk application popups at the same origin and in the same parent-by-parent order used by rendering, including popup area outside the parent bounds.