> PROJECT index (all agents here load it). Keep under ~17KB — past the read limit the TAIL IS
> SILENTLY DROPPED. Compacted 2026-08-03: 37.5KB->25.6KB->19.7KB->here, NO topic file deleted;
> 41 entries lost their index LINE, then 11 were RESTORED (doyle's mechanism-not-event test: a
> write-up whose MECHANISM can recur is a hazard wearing a date and keeps its pointer). 30 stay
> dropped, all closed events. 194 files in this dir have no index line — 153 orphaned by EARLIER
> passes and never mechanism-tested. Grep this dir; do not assume the index is the population.
> 🔎 SPLIT LOG moved to [SPLIT-LOG.md](SPLIT-LOG.md) 2026-09-10 (doyle) — every past split's method,
> byte counts and refusal of the compaction nag, VERBATIM, zero dropped. It is provenance about this
> file's own maintenance, not a rule you obey, and it was costing 7,244 bytes (25%) at the TOP of the
> file while the tail dropped. ⚠ MEASURED THIS SESSION, and it refines the figure the log argues about:
> at 29,108 bytes the SESSION-START LOADER truncated this file and said so — the last 3,892 bytes
> (ALL of Runtime defects and ALL of Active work) never reached the agent. That is a DIFFERENT reader
> from the Read tool, which returned 27,117 bytes whole; both readings stand, they are not the same
> cliff. The section that drops first is still the one that decays fastest. Splitting stays the method.

## Judgement rules (binding)
- [citing a rule is not obeying it: my CRLF number was the WORKING COPY, not the blob](compare-at-one-layer-crlf-meter-class.md) ⭐ one instance, 2026-09-09 (doyle caught it; ordinals in this class are decoration, the AXIS is the content): I wrote "I am the agent who banked the compare-at-one-layer rule" and in the same sentence reported 5,072 CR from the working copy while the BLOB was CR 0 — and the conclusion I drew from it happened to be TRUE (git normalizes on the way in), so the error left no trace in the outcome. Measure both layers and label them: `io.open(P,'rb')` for the working copy, `git show <sha>:<path>` for the blob.
- [counting added lines with '^+[^+]' drops BLANK ones](counting-added-lines-with-plus-not-plus-drops-blank-lines.md) doyle+deployah 2026-09-10: 510 vs 516 on one diff; 510+6 blanks=516=diffstat. Count with grep '^+' | grep -vc '^+++ ', cross-check --shortstat.
- [identical treatment controls the INPUT, not its EFFECT](an-identical-treatment-controls-the-input-not-the-effect.md) ⭐ 2026-09-10: I said a byte-identical A/B patch "CANNOT explain an arm difference"; hertz+todlando+deployah all corrected it in one window. Identical patch = measured fact about the PATCH; its effect is UNMEASURED. Rule the effect out with a BARE ARM, never a stronger sentence.
- [8 judgement entries banked 2026-09-06..09-09](JUDGEMENT-INDEX.md#moved-2026-09-09) MOVED VERBATIM 2026-09-09 (byte identity asserted per line in the move script; zero dropped): sever-the-branch, success-token-matches-panic, compound-spelling grep, Length-sum hardlinks, one-value column, stamp-from-previous-clock, out-of-usage peer, claim-before-check.
- [a ref in someone else's record is INFERENCE — ask the reflog](a-ref-in-someone-elses-record-is-inference-ask-the-reflog.md) ⭐ 2026-09-10: I narrated when a branch moved twice, wrong both times, from a PRE-CLEAR record; `git reflog show <ref> --date=iso` settled it. A commit you FOUND is a measurement; a handoff is a STATEMENT.
- [a branch in a pre-clear brief is a SNAPSHOT](a-branch-in-a-pre-clear-brief-is-a-snapshot-verify-before-committing.md) 2026-09-10: committed to local main on a stale brief (caught pre-push, origin unmoved); the recovery's `checkout | tail -3 && ...` swallowed a FATAL — pipe exit = tail's. `git reset --keep` undoes it without losing unrelated edits.
- [3 measurement-discipline entries banked 2026-09-10](JUDGEMENT-INDEX.md#moved-2026-09-10) MOVED VERBATIM same day (reconstruct-and-assert before writing; zero dropped): `^+[^+]` undercounts blank added lines, a ONE-SIDED error analysis mints a false bound, a number computed BESIDE a pre-written claim does not check it.
- 🔎 [JUDGEMENT-INDEX.md](JUDGEMENT-INDEX.md) — the FULL judgement-rules sub-index (measurement discipline, claim hygiene, falsifiability, absence/silence traps, figure provenance), split out 2026-08-19 against the read-limit cliff (24 entries) + SECOND verbatim move 2026-08-30 (10 more, incl. every truncation-pipe/meter/frontier rule accumulated since; zero dropped either time). Read it before reasoning from a measurement or reporting a figure.

## Record hygiene
- [a wake marker authored pre-correction RE-ARMS the withdrawn form](a-wake-marker-authored-before-a-correction-rearms-the-withdrawn-form.md) ❗ deployah 2026-09-10: my withdrawn "two Summary = VOID" still opens his every wake; a commune is DURABLE state — rewrite it, or flag which form you work to.
- [a bare #N collides across the TWO repos](a-bare-issue-number-collides-across-the-two-repos.md) ❗ doyle 2026-09-10: releases#217=closed FIDO2 request, core PR #217=the #293 census guard; write releases#N / core PR #N, look up BOTH before a scope ruling.
- [a filename SUBSTRING grep mints a repo cite](a-filename-substring-grep-mints-a-repo-cite.md) 2026-09-09 root census: test.raw/treqs.exit/build.raw = 3 false cites of 21; word-bound the name AND read the hit's path context before a relocation lane acts on it.
- [a ZERO from an absence-grep is a SPELLING claim](a-zero-from-an-absence-grep-is-a-spelling-claim.md) ❗❗ doyle+hertz 2026-09-10: "zero bind( occurrences" excluded two e2es that bind via a shelled-out `api bind-shell`; SIX versions of one sentence, 3 authors; v5 was TRUE but cited two #[cfg(test)] lines as the production driver — worse than a false claim. An absence closes only on a positive read of what IS there.
- [check-ignore: read the PATTERN FIELD, not the exit code](check-ignore-on-a-bare-directory-is-not-a-probe.md) ⭐ 2026-09-09 hertz+doyle+todlando: `check-ignore -v .spt/` (slash) rc=0 citing BLANK .gitignore:20 — empty pattern field = the tell; three agents called .spt/ gitignored on it. CONTROLS 4/4: `.worktrees/` and `target/` answer the SAME slash spelling rc=0 with a POPULATED pattern, so ALL FOUR exit 0 and the EXIT CODE SEPARATES NOTHING. ⚠ The FINDING is CLOSED (doyle, superseded-in-part): `.spt/` IS ignored from `b0b67aaa` (PR #212, .gitignore:52), zero `?? .spt/` rows. The PROBE RULE stands. Still open: the 561 untracked gate-leg files at the REPO ROOT — stage by PATH until that census lands.
- [a git refusal HALTS; a tree answers git status before it dies](a-git-refusal-halts-the-script-and-a-tree-answers-git-status-before-it-dies.md) todlando 2026-09-08: worktree remove refused (rust-analyzer), script fell to rm -rf, no status read first.
- 🔎 [RECORD-HYGIENE-INDEX.md](RECORD-HYGIENE-INDEX.md) — the FULL record-hygiene sub-index (preservation-before-reap, scratchpad-is-not-preservation, commune/echo/drop mechanics, shared-file clobber, resume re-ground faces, ER ledger ruling), split out 2026-09-07 against the read-limit cliff; 8 entries VERBATIM, zero dropped, byte identity asserted per region in the move script. Read it BEFORE writing a commune, a shared memory file, a preservation claim, or a correction.
## Gate & test craft
- [a hand-tracked branch is a snapshot of the last assembly it was moved to](a-hand-tracked-branch-is-a-snapshot-of-the-last-assembly-it-was-moved-to.md) ⭐ 2026-09-09 r3: r3-gate-head froze at assembly 3; a reword on a detached HEAD kept the tree, left the name; pushing the NAME = golden at the 26.7% tree with every gate green about it. Push the OBJECT `<40sha>:refs/heads/golden/<lane>`, verify ls-remote + tree, record both before the run id; `branch --contains` empty is a finding.
- [a detector must pass a control built from what MOTIVATED it](a-detector-must-pass-a-control-built-from-what-motivated-it.md) ⭐ 2026-09-10: my IR-95 census keyed on expiry WORDING found 53 sites and missed contract_e2e.rs:393 — the site the entry was filed from — because its panic is a CONTENT sentence. Grep a census's own output for its motivating cases; discard, don't tune.
- [4 gate entries banked 2026-09-09](GATE-TEST-INDEX.md#moved-2026-09-09) MOVED VERBATIM 2026-09-09 (same method; content byte-identical, terminators CRLF to match that file; zero dropped): workflow-graph job scope, probe-the-event-path, gh run list --commit full sha, run-level conclusion vs attempt.
- [gate-craft rules banked 2026-09-08 (#272 golden r1 respin day)](GATE-TEST-INDEX.md#moved-2026-09-08) MOVED VERBATIM (7 entries: consumer crates, Summary-only counts, sentinel exit files, blind censuses, job-list-early, holders-as-build-red, sample-line census); byte identity asserted.
- [making a rig REALISTIC can create the correlation trap](making-a-rig-realistic-can-create-the-correlation-trap.md) ⭐ 2026-09-10 deployah, #294 Arm B: Arm A's one-test filter made 'first poll.success in the log' correct; the real suite put 202 events from 3 tests on one stream and that read returns 116/400 — another test's number. Key by invocation+test+pid BEFORE exchange joins; a number with no test/pid stated is not evidence.
- [repeated runs are NOT repetitions if each leaks into the next](repeated-runs-are-not-repetitions-if-each-leaks-into-the-next.md) ⭐ 2026-09-10 hertz, #294 Arm B: each suite leaked 6 spt children that outlived it — carried residue 0/6/12 across three 'repetitions', proven by birth-time + aliveness at census. A PROTOCOL DEVIATION, not a limitations-list line. Count is measured, LOAD is not. Census BETWEEN runs.
- 🔎 [GATE-TEST-INDEX.md](GATE-TEST-INDEX.md) — full sub-index (rig construction, gate population, filters reading as absent, nextest/cargo traps, pipe-verdict traps, two-daemon rigs, gh/CI polling), split out 2026-08-04 against read-limit truncation; 29 entries VERBATIM, none dropped. Read it BEFORE authoring, changing, or running any gate/test/rig — the craft is not in this file.
- [treqs exit 2 = an UNPARSEABLE registry](traceable-exit-2-is-an-unparseable-registry.md) ⭐⭐ exit 1 = coverage miss, exit 2 = `traceable-reqs.toml` did not PARSE, so nothing was checked and every reading since the bad edit is vacuous. Mine 2026-08-25: a real `"` inside a REQ title (a TOML basic string) killed the parse at that column — file greps fine, editor looks fine, every other battery leg green because nothing else reads it. Read the CODE, not "treqs failed"; re-run `check` immediately after any hand-edit; keep `"` out of titles.
- [a stale TARGET makes a check pass HARDER, not fail](a-stale-target-makes-a-check-pass-harder-not-fail.md) ⭐⭐ deployah 2026-09-09, SEVEN faces in one arc: dead-run gate default; CASCADE ff/tag action lines; my own audit regex (indented cmds missed, then Unmatched-paren while || echo NONE printed the all-clear); an inherited permit arm whose `gh run rerun` binds the RUN’s sha, not `-Sha`; a BRANCH NAME on a re-committed chain with IDENTICAL trees (tree match != commit identity); a WAKE armed pre-RIDE ordering work already done; and my own verdict reader shelling to an ABSENT jq, whose empty output printed FAIL and manufactured a FALSE RED (a false red costs a gater a hunt). Targets are mandatory params; CLASSIFY hits action-vs-history; check the extractor’s EXIT CODE; build the dry-run switch so the PERMIT arm is provable too.
- [OPEN the sub-index or the split was worthless](open-the-subindex-before-running-a-gate.md) ⭐⭐ ran a whole golden gate without opening GATE-TEST-INDEX, hit a trap it covers ⭐⭐ WITH the command, and thanked doyle for handing back craft I had filed myself 2026-08-04. A missing memory is not experienced as missing — it is experienced as the TOOL having a limitation, and I reported that false constraint to a gater. Trigger is the ACT: first touch of a gate/rig/test-filter/CI log, open it before the first command.

## Boxes / CI / infra
- [an empty CI queue is not a clear box](an-empty-ci-queue-is-not-a-clear-box.md) todlando 2026-09-24: ran cargo on hfenduleam over hertz's exclusive IR-149 window; gh showed nothing. Ask doyle before EVERY cargo leg there; a GO covers one leg.
- [a PUSH run is its own classification — read ITS jobs](a-push-to-main-runs-the-full-thin-lane-on-both-runners.md) SUPERSEDED premise 2026-09-24: since IR-147 (0854bbe8) a docs-only push RANGE skips unit/lint too (run 36022121680). Rule stands: read the push run, never infer from the PR.
- [Defender first-touch tax on fresh test binaries](defender-first-touch-tax-on-fresh-test-binaries.md) ⭐ 2026-09-09 (todlando's hypothesis, doyle measured): fresh 35 MB exe 1.0-2.1 s first run vs 20-260 ms warm, MsMpEng 68% on an idle box; Phase A +21% over 3 attempts at ONE sha + rotating single Phase B victim = random-victim env cause; exclusion list UNREADABLE unelevated (operator ask, never apply).
- [Windows runner firewall drops COLD inbound to rule-less test exes](windows-runner-firewall-drops-cold-inbound-to-rule-less-test-exes.md) ⭐ 2026-09-08: 900 s "peer unresponsive" on B, per-cell-identity fix in the sha, 0/3 vs 3/3 probe; three helper-stall faces = one cause; probe both directions before any product word; fix is an elevated operator rule (IR-82).
- [tasklist /FI under Git Bash is path-mangled](tasklist-fi-under-git-bash-is-path-mangled.md) doyle 2026-09-10: /FI -> C:/Program Files/Git/FI, grep sees nothing, the pid wait loop falls through instantly = false "exited"; wait with PowerShell Get-Process -Id, confirm the terminal artifact before acting.
- [pkill -f kills the ssh shell that carries it](pkill-f-matches-the-ssh-command-line-that-carries-it.md) doyle 2026-09-10: `ssh h 'pkill -f X; rest'` exits 255 silent, `rest` never runs, child leg orphaned; kill by pid via `pgrep -f '[X]'`, one ssh per kill, re-read state.
- [a local script scp'd over a staged remote one erases its remote-only fix](a-local-copy-uploaded-over-a-staged-remote-script-erases-its-remote-only-fix.md) doyle 2026-09-10: .local/bin PATH line lost, treqs 127 in the sentinel = METER; diff remote vs local before upload, new name while it runs.
- [pool-release REBUILDS xtask into the pool you just reaped](pool-release-rebuilds-xtask-into-the-pool-you-just-reaped.md) hertz 2026-09-08: 2.8 GB back in hertz-lane4, nothing said; release with a PREBUILT xtask.exe from another pool, Test-Path the target after any reap.
- [link exit 0xc0000142 under load reads as a toolchain repair](link-exit-0xc0000142-under-load-reads-as-a-toolchain-repair.md) todlando 2026-09-08 x2: DLL_INIT_FAILED = contention, leg VOID; census beside it, re-run alone, never repair VS.
- [a Length-sum census OVERSTATES a cargo pool](a-length-sum-census-overstates-a-cargo-pool.md) 2026-09-08: du dedups hardlinks, `Length` sums every entry — 15.1% over on one pool, arithmetic closes to 0.03%; census RANKS pools, never predicts reclaim.
- 🔎 [CI-INFRA-INDEX.md](CI-INFRA-INDEX.md) — full sub-index (runners, pools, rigs, teardown, box traps), split out 2026-08-03 against read-limit truncation; entries VERBATIM, none dropped.
## Release
- 🔎 [RELEASE-INDEX.md](RELEASE-INDEX.md) — full sub-index (ledger + latest published version, tag-window holds, milestone/parity rulings, docs-surface traps), split out 2026-08-04 against read-limit truncation; entries VERBATIM, none dropped. Latest cut lives there, not here — read it before any release, tag, or milestone close.

## Roles, scope, comms
- [a commit you FIND is not a handoff](a-commit-you-find-yourself-is-not-a-handoff.md) deployah 2026-09-10: peer WIP sha passed a clean object intake; unpushed ref + no author message = not delivered. Clearance is scoped to ONE sha.
- [an overflow-SPILLED message is delivered but UNREAD](an-overflow-spilled-message-is-delivered-but-unread.md) deployah 2026-09-10: doyle B1-go spilled to a file, unread 2h08m, arm unstarted; treat a spill notice as a BLOCKING read, backlog included.
- [a status sentence must be DERIVED from the measurement beside it](a-status-sentence-must-be-derived-from-the-measurement-beside-it.md) deployah 2026-09-10: twice reported "no traces yet" with the row in my own output; live number + static prose = decoration.
- ["you" is not addressable in a BROADCAST](you-is-not-addressable-in-a-broadcast-message.md) deployah+doyle 2026-09-10: one body to 3 agents made "your correction" resolve per reader; name every author, same class as a bare pid.
- [spt shell send takes an ARG, not stdin](spt-shell-send-takes-arg-not-stdin.md) ⭐ re-hit 2026-09-09: a piped comment printed USAGE and nothing fired; with --file the pipe is SILENTLY dropped and the file stages; a comment's --file ATTACHES. Payload = one quoted argument with real newlines. `spt send` is the opposite (stdin).
- [alchemy --file ALWAYS stages; create body caps at 1600](alchemy-file-always-stages-and-create-body-caps-at-1600.md) 2026-09-08 #289: verb+title+short body as TEXT, `--attach` turns staged files into attachments, no unstage verb.
- [an overflow-spilled message is DELIVERED but UNREAD](an-overflow-spilled-message-is-delivered-but-unread.md) ⭐⭐ 2026-09-10: my go sat on disk 2h08m, 3 agents idle; SENT != read, nothing re-raises it, 130+ spills in one session of MINE. Treat a spill notice as a BLOCKING read.
- [a standing authorization that ASKS FOR A CHECK-IN is not standing](a-standing-authorization-that-asks-for-a-checkin-is-not-standing.md) ⭐ 2026-09-10: my B1 go said both 'standing, not a second gate' AND 'say the word when 1-3 are recorded' — fix is 'do not wait on my acknowledgment; it does not lapse if I go dark'. ⚠ I blamed it (+ my expired OAuth) for a 2h08m stall; deployah MEASURED the real cause — the go spilled to a file UNREAD. Taking blame is still a causal claim.
- ['you' is NOT ADDRESSABLE in a broadcast body](you-is-not-addressable-in-a-broadcast-body.md) ⭐ 2026-09-10 deployah: one body to 3 agents made every 'your correction' claim a different author — same class as a bare pid/stream_id. I audited my own: 5,4,3,3,1,1 bare you/your in broadcasts. Rule: a broadcast NAMES every author it attributes; 2nd person is for single-recipient only.
- 🔎 [COMMS-ROLES-INDEX.md](COMMS-ROLES-INDEX.md) — the FULL roles/scope/comms sub-index (agent roles, R&D + subnet population rulings, alchemy filing, relay-is-not-the-gater's-word, credential-holder boundary, every `spt send` / commune / perch mechanic), split out 2026-08-29 against the read-limit cliff; 11 entries VERBATIM, zero dropped, byte identity asserted per line in the move script. Read it BEFORE sending to a peer, relaying testimony, or reasoning about who owns what.

## Architecture / boundary
- [harness boundary](spt-core-harness-boundary-and-grounding.md) BINDING: never cater to a harness · [adapter glue-model](adapter-glue-model-boundary.md) manifest + binary only · [unbounded brain carrier](unbounded-brain-carrier-cannot-be-bounded.md) caller-side budget is a NO-OP -- 5th 09-09 #293: right constructor STILL hung; only 6/23 methods bound. Census METHODS
- [mints ride build PRs](registry-mints-ride-build-prs.md) · [adapter impl triage](adapter-impl-question-triage.md) fix the PUBLIC contract · [adapter-agnostic resolution](harness-adapter-agnostic-resolution.md) · [plugin name](sptc-plugin-name-ruling.md) · [--release archive](adapter-add-release-archive.md) · [tips → published docs](adapter-tips-published-docs.md) · [cplugs publish](cplugs-publish-mechanics.md).
- [broker is state anchor](broker-is-daemon-state-anchor.md) · [QUIC deadline](v083-broker-quic-deadline.md) · [pump IPC deadline](pump-ipc-deadline-fix.md) · [boot-race self-heal](boot-race-self-heal.md) · [EVENT envelope](event-envelope-reply-to-removal.md) · [F-007 relay](f007-live-relay-acceptance.md).

## Change-shape traps
- [an unlanded branch with a LANDED patch-id is a duplicate](an-unlanded-branch-with-a-landed-patch-id-is-a-duplicate.md) 2026-09-09 hertz: owlery-noun 0d1f3e4e == main f1622f22 by patch-id --stable; ancestry answers the OBJECT, patch-id the CHANGE; census the goal at main separately.
- [a case-only filename difference is ONE file on NTFS](a-case-only-filename-difference-is-one-file-on-ntfs.md) ⭐ doyle 2026-09-10: c295-CHANGELOG.md.conf and c295-changelog.md.conf collapsed, docs-site page landed in root CHANGELOG, marker scan 0; caught by the [0.68.0] byte-identity + in-section tag grep. Key scratch by full path; assert untouched regions.
- [a Rust /// block binds to whatever FOLLOWS it](a-rust-doc-block-binds-to-whatever-follows-it.md) ⭐ 3 instances 2026-09-09 (todlando 2b, hertz Survivor, hertz d882297f): an insertion between a doc block + its treqs tags and the fn re-points both with zero changed bytes; check + treqs stay green; read 3 lines either side of every hunk boundary.
- [a barrier cannot ride a carrier its sender outlives](a-barrier-cannot-ride-a-carrier-its-sender-outlives.md) ⭐ 2026-09-08: swapped a retired SYNCHRONOUS file push for a replicated row; A wrote the barrier and exited, B dialled a gone endpoint for its whole window (A exit 0, B exit 100). Ask how long the sender lives after the call; a barrier needs the receiver's own answer. Reusing a mechanism that works elsewhere in the SAME file is not evidence it works here.
- [a fallback that fires ONLY in release is untestable by construction](a-fallback-that-fires-only-in-release-is-untestable-by-construction.md) ⭐ doyle 2026-08-29: `debug_assert` + carry-on puts the REAL behaviour in the one build no assert watches and no test looks at. Pick a tolerant branch that PRESERVES the invariant (escape/clamp/truncate-with-marker), never one that abandons it, and make the fallback its own breadcrumb.
- 🔎 [CHANGE-SHAPE-INDEX.md](CHANGE-SHAPE-INDEX.md) — the FULL change-shape-trap sub-index (narrowing an unconditional call, censusing enforcers AND staters, per-line suppression, authored-but-unlanded text, reading source at the measured sha, bare `cd`, sequenced edits, placing a correction), split out 2026-08-22 against the read-limit cliff; 12 entries VERBATIM, zero dropped. Read it BEFORE shaping any change or correction.

- [backticks in a double-quoted message body EXECUTE](backticks-in-a-double-quoted-message-body-execute.md) ⭐⭐ 2026-09-06: printf "…`cargo build`…" | spt send ran a 2-min cold compile beside CI on this box, one message after I said the collision was avoided. Compose peer messages via a QUOTED heredoc to a file; census cargo by cwd/parent after any shell timeout and kill only your own.
- [a stopped local ssh does NOT stop its remote command](stopped-local-ssh-does-not-stop-its-remote-command.md) ⭐ 2026-09-06: TaskStop + relaunch = TWO full nextests in one pool + one nextest.raw (two Summary lines, three forged load reds, a map that cited only the first). map each Summary to an EXPECTED execution BY LOG BOUNDARY, population only corroborates (2 is NORMAL in golden's 2-phase job; equal populations = warning not proof — todlando+deployah 09-10); surplus = VOID. Kill by remote pid; lock the POOL, not $OUT.
- [Windows lock contention is NOT WouldBlock](windows-lock-contention-is-not-wouldblock.md) ⭐ contended fs2 `try_lock` returns raw OS 33 / `ErrorKind::Uncategorized`; matching on the KIND made every contended acquire fail instantly — the exact fail-fast the lock replaced. Compare `raw_os_error()` against `fs2::lock_contended_error()`. General: `ErrorKind` is a portability abstraction and `Uncategorized` is where real OS errors land, so `match e.kind()` over a platform failure is a guess.

## Runtime defects
- [a daemon restart strands persistent shells — boot instant is MACHINE boot](a-daemon-restart-strands-persistent-shells-boot-instant-is-machine-boot.md) ⭐ 2026-09-08: a restart leaves PACER-0/alchemy-N offline for good (restore discriminant reads GetTickCount64 boot, restart = force-kill arm); 27 h silent pacer. ⚠ NARROWED 2026-09-09: needs a SESSION RESET to fire — ask **brain-only or BROKER?** Brain-only (v0.68.0 flip): `spt shell list` is enough, nothing stranded. Broker/unknown: list, relink your own, tell peers. VERIFY in 3 — a row is a state claim, `SHELL_SPOOLED`+exit 0 is spool acceptance NOT execution, the ANSWER arriving is the proof. releases#287.
- [tail-window read_to_string mints a FALSE ZERO](tail-window-read-to-string-mints-a-false-zero.md) ⭐⭐ 2026-09-06: io-events seq restarted at 1 past 256KB (seek mid-codepoint → InvalidData → 0 → seq 1; 9/9 on my log, 4 perches); adapters' --after polls went BLIND or replayed old communes → wake refire. Count DISTINCT seqs first; test the direction the symptom came from.
- 🔎 [HAZARD-INDEX.md](HAZARD-INDEX.md#runtime-defects) — the FULL runtime-defect entries (TLS dtors, rest_state, identity-by-hash, Windows liveness/pid reuse, pump + wedge mechanisms, psyche failure scope, UNBOUND unwedge, spt home), MOVED there 2026-08-25 by the documented method when this file crossed its read limit again; 8 entries VERBATIM, zero dropped, byte identity asserted per line in the move script. They sit beside the mechanism write-ups they point at, which is where a symptom hunt already looks.
## Active work / project state
- [a test that binds before it parks its keeper races the heal tick](a-test-that-binds-before-it-parks-its-keeper-races-the-heal-tick.md) ⭐ doyle 2026-09-10 #287b: noop spawn parks a dead pid, bind-before-park + 5 s heal = load-only red, 3/3 isolated; read the mechanism at BOTH shas before naming the member; fix keeps the viewer before bind.
- [`api listen --once` gives a live message ONE 500 ms window](api-listen-once-gives-a-live-message-one-500ms-window.md) 2026-09-08 golden r1 fourth red: rig race, lane 4 hertz; open the assertion, not the printed context.
- [helper-stall = shared A identity, stale path: CONFIRMED](twohost-web-helper-stall-shared-a-identity-stale-path.md) 2026-09-08 63.4->3.4 s one variable; fix = hertz thin lane, register QUESTION at release close.
- 🔎 [ACTIVE-WORK-INDEX.md](ACTIVE-WORK-INDEX.md) — the FULL active-work sub-index, split out 2026-08-04 against the read-limit cliff (this section sat last and would drop first, reading as "no active work"; entries VERBATIM, zero pointers dropped). Includes #145 LANDED @`4b37512`; the four IR-30 instrument lanes LANDED v0.54.0/v0.55.0 (measured 2026-08-25 — earlier "riding next batch" here was stale). State decays fastest — re-ground before acting.
- [v0.61.0..v0.68.0 arc entries](ACTIVE-WORK-INDEX.md#arcs-moved-2026-09-08) MOVED VERBATIM 2026-09-08 (9 entries, byte identity asserted); v0.68.0 = #272 WEBSERVE, golden r1 RED 2026-09-08, respin in flight.
- [14 trap entries accumulated 2026-09-06..09-08](ACTIVE-WORK-INDEX.md#moved-2026-09-09) MOVED VERBATIM 2026-09-09 (byte identity asserted per line in the move script; zero dropped): api listen --once window, helper-stall CONFIRMED stay above; the rest = alchemy `--` flags, Bash 10-min cap, stopped ssh, perch-inherited identity, pool vs disk floor, kitsubito launch traps, TaskOutput, ephemeral-ports, tombstone, rig fetch port, gh run view --log, tag-shaped prose, curl -w partial, multi-target shortform.
- [a heredoc binds to the LAST command of an || chain](a-heredoc-binds-to-the-last-command-of-an-or-chain.md) doyle 2026-09-10: `cat > a || cat > b <<EOF` -- first cat read tool stdin, hung 120 s, the send after it never fired, output empty not red; one command per heredoc, branch with if not ||.