August 15, 2026

settleTo gave home and overview the same end shift, so a release past the multitasking detent animated *down* to it, held the overview fully present, and teleported — the release never reached its end target. detent is the boundary between the two (rail: pullTo(travel, missionAt)), and presence is built to reach 0 at clock 2, which is where home lives.

The rig held 760px of a 1037px surface and left 226 for a status row, the agent field, both pads and four buttons — so the pads were 92px and the last row sat under a dock that claims no exclusive zone unless pinned. With the hand up the rig drops to 320 and the pads take what is left.

Atmosphere::lerp returned an endpoint at t=0.5 and apologised for it in a comment — the enum had nowhere to put a blend. It has one now: Custom carries the four tones, so a room halfway from MintTea to NeonGlow can be stored, compared and sent, not only drawn. Unnameable by construction, so nothing can ask for a blend by name and get a room she never chose.

CI caught what a fresh pair of eyes needed: invalid_input wanted a &str, hand wanted a borrow, and the validation test read its input after the move. All three now follow the shapes already proven in the same file.

The injection engine was built (usb-hid-inject) and the shell owns it (USB Hands, the usbHands IPC, the skill string that teaches the reach), but her own vocabulary ended at set_usb_mode — she could arm the hand but never say it was there. speaks the shell's bridge: status, type, key, click, pointer, gated by the host, not by her.

CI's lib run passed but the sessiond bin had never been built until now. The plexus's constructor is an associated function, not a module item; a duplicate panel_on got in the way of the one that already existed; a test Daemon omitted the new plexus field; and the clock's attended ingest borrowed the guard twice in one expression. All four are gone.

The test plexus called an associated function through the module path, and the Body tool's unknown-verb refusal handed a String to a &str parameter. The gate earns its keep.

`Changing(bool)` becomes `Light { changing, lux }` end to end: sensord forwards the number, the machine keeps the level in evidence with a 30 s stale rule, and both charge and the presence sensors ingest into the plexus on arrival. The clock feeds `attended` at 1 Hz, plexus events land in the forensic trail as Somatic, and the DeviceState answer gains a `body` section. The Body tool is registered and committed with the substrate that carries it.

phone_plexus leaves the test module and takes the clock. It grows `attended`, derived by sessiond rather than reported by a sensor, and the two grip gauges that nothing reports yet — the gap on the record instead of a false calm. to_json renders every field's belief, trend, locus, health and pressure, the ranked pressures, homeostatic cost and the unreachable list for the IPC surface; unknown stays null, never zero.

A battery at .42 is still .42 when nobody looks — only confidence in an unrefreshed reading decays. Feeding a fuel gauge into an accumulator would drain the pack because the reporter went quiet, which is the empty-result trap wearing a units label. Field keeps exudates; Level keeps readings.

INTERO (RobOntics'25) axiom 7: a variable is interoceptive only if some subsystem can act on it. That is doctrine §13 in first-order logic, so `unreachable()` lists inner fields with no verb and a test fails on them.

Fields replace booleans: accumulation with half-life decay, velocity, trend detection. Source health monitoring closes the gap the mapping session found — a dead nerve now reads as silent, not calm. Thirteen tests.

no-ai-attribution failed in checkout's post-action — the runner lost /var/run/act/actions/.../dist/index.js between steps (MODULE_NOT_FOUND). rust-test passed; aarch64-artifact was skipped behind the failure.

ChargeEvidence was the rule violated four times in one type: a side door past the gate, the decider probing sysfs on the clock, the driver interpreting, and nothing leaving tick(). Its comment cited bearer — another instance of itself.

mid_turn_peek was a bare await while the model call three hundred lines up was already guarded, so a subconscious that never answered parked the turn somewhere /cancel could not reach it — twenty minutes, measured 2026-08-15, on a provider whose key was spent.

The authority takes ext-session-lock before any surface exists, which is the window -pre reserves. It cannot start earlier — ext-session-lock is a Wayland protocol and needs the compositor's socket. Also drops the injected venv variable from eleven surface scripts; each finds the path itself.

/etc/pam.d/souveraine-sessiond arrived by hand on 2026-07-16 and is owned by no package on either device — root-owned config can only arrive by package. Same rail as souveraine-stepup, plus a bsdtar assertion so a future drop fails the build instead of shipping quietly. TASK-76.

Compaction can drop the opening user message, and the tool_result answering the first turn orphans on the wire when its call alone is deleted — a 400. Calls and the results bound to them go together.

TASK-33 part 2: the machine owns the conclusion — plugged, status, charge type, and what it means — probed on the bearer's cadence, one decision made once on the trail. Surfaces render it; they do not re-derive it.

TASK-08(f): EvidenceSeen held the stamps internally and nothing outside the daemon could read them. to_ipc_json now carries evidence_last_seen_secs_ago; null stays distinct from stale, because never-reported and long-ago are different claims.