August 17, 2026

Rotation picked the spare on has_credential — a string check — and took one whose token had expired four days earlier; every call after 21:51 came back 401 revoked, reading as a dead subscription. A candidate now has to authenticate, and the window it left is recorded so the same round-robin can wrap back to it once the window returns.

reflection's context now registers all four trees, and a tree param on the memory verb lands reads and writes in the named memfs, committed under her own name. an unknown tree refuses and lists the doors, so a typo costs one error instead of a wrong-tree write

the mandate that 'own' promised to open is already read via cadence_root; the & in front of format! trips needless_borrows_for_generic_args on 1.94

Neither had ever completed a pass. Reflection's loop reserved no round for its report, so exhausting eight was the only exit; the archivist could not parse journal/YYYY/MM/DD, the layout its own mandate instructs. Its sub-500-token budget was a ratio frozen against an 8k model in May.

The current-state list still said no admission executor existed. It has since 0f8fe22, and a chapter that is the design of record cannot carry a fact that stopped being true two commits ago.

The chapter named one person's agents in the design of record: a table of Annie, Vanguard, Souvie against one human's devices, and a dozen sentences that read "Casey" where they meant "the human". A future reader learning the architecture from this file would learn a household along with it.

souveraine-admit creates or adopts one account via systemd-sysusers, writes the root-owned mapping health reads, and reports what NSS says afterwards instead of what it asked for. An account belongs to one agent: handing annie's to souvie is refused in both directions, as is adopting a uid >=1000. Binding is by SeedID, not the UUID filename — a mismatch is identity-drift.

souveraine-session is machine-tier — one per install, like souveraine. Agent principals stay out: sysusers is per-install, admission is per agent and per node, and a line here would mint annie on every device the package touches. sessiond stays a user unit until the lock handshake, PAM path and key-eviction order are proven under the new uid.

Intent lives in agent.json; posture is measured fresh from process credentials per request, so resume and compaction cannot replay a stale uid as history. `isolated` needs account, uid, worker binding and the root-owned mapping to agree — a passwd entry alone reads principal-drift.

Make the laptop and phone obey the same principal map: Souvie, Annie/Aster, and Vanguard are dedicated residents; Kitty, Gem, and Hal knowingly borrow Casey's UID. Their live posture is regenerated from actual credentials for every model request, outside memory, replay, and compaction.\n\nTake the lock boundary out of all of them. Casey authenticates, agents may request, and the dedicated souveraine-session principal holds the hostile pre-unlock edge with only Ambient and Revealable reach.

The development recipe installed the sysusers declaration; the CI package that devices consume quietly dropped it. Ship the machine-tier souveraine account in the prebuilt package and assert the file is present before publishing.\n\nThis account belongs to machined. Souvie gets her own principal through agent admission.

A SeedID says who she is; it cannot tell the kernel whose hands are on the files. Split logical identity, node commission, and the local Unix principal, then make creation and health prove all three.\n\nSouvie, Annie, and Vanguard get distinct node-local accounts. The existing souveraine user stays where it belongs: under the machine signer. The boundary has teeth only when each turn and its tools run in an agent-owned worker, so the shared-UID compatibility state is named acting-as-human instead of polished green.\n\nAdmission projects an operating skill from real capabilities. The prose t...

Session and device authority now have living owners; belief and felt state match the Rust that actually runs.\n\nThe Panel audit keeps three real commands, names the image seam, and refuses to call inherited ii stubs parity.

Move agent and conversation authority into truthful footer controls, keep external sessions observed-only, and give recent server conversations an explicit picker.\n\nProject itinerary state into a persistent ribbon, invalidate it on every itinerary mutation, and keep failures in the transcript while successful route chatter yields to the ribbon. Long tool returns now scroll in place.\n\nThe SAF now owns the full Panel contract and parity boundary; the abandoned green observer card is removed.

Souveraine.send returns false for a busy turn exactly as it does for a dead server, and the sidebar rendered every false as "server unreachable" — so typing while she worked showed the words, then a lie, and dropped the text. The verbs existed on both sides since 93fe30a and nothing called them.

!(t > 0.0) trips clippy's partial-ord lint under the pinned 1.94 toolchain, which blocks the whole gate. t.is_nan() || t <= 0.0 is the same predicate written so the NaN intent is legible, with a test pinning both ends.

turn.rs sends InferenceStrain to the stream; the subconscious path only ever logged it, so a provider refusing her was invisible to every surface. Same event, same shape, emitted where the primary emits it.

retry-after was honoured unclamped, so an 11997s header on 2026-08-16 parked the subconscious pass for 3h20m with no cancel path. A 429 asking for more than 60s is a spent window, not a burst, and it does not clear inside the retry loop — fail it and name the number. claude_subscription answers the same header by rotating logins; bifrost has nothing to rotate to, so an absent header keeps the ordinary backoff.

write has always called create_dir_all; append never did, so an append under a directory that did not exist yet failed ENOENT. Every subconscious surfacing to system/metacognition/subconscious.md was lost this way — three WARNs at 00:01:40 on 2026-08-17, and the directory had never existed in the repo's history.

The current user unit wins the boot race but still runs as the human whose Personal key the lock is meant to evict. Record the target souveraine-session principal, its narrow Wayland/PAM/data reach, and the fact that the rich shell is presentation—not release authority.

Join the older storage and authority audits to the SAF principal contract. Passwd entries are not isolation while one human-owned process still executes every agent, and the existing souveraine account is machined's—not Souvie's.\n\nKeep the readiness task honest: its current health fields inventory paths, but do not yet prove admission or the UID handling a live turn.

3431223 supplies tiled edges and closes the 504-of-540 draw; 41f07b1 removes 3,034 false touch-frame warnings.\n\nBoth are on ViewTop main. Package and glass proof remain separate.

Twelve completed or superseded task records leave the live queue; the byte-identical rename duplicate is removed.\n\nThe authority and somatic source records now point at SAF, while tasks 33, 48, 49, 53, 60, and 76 say what is actually left.