TASK-565fa463: sequence inbox API and dormant-service phases with current QA gates

.torch/backlog/TASK-1e688a36-9df7-47ad-a540-99de15979717.json

@@ -0,0 +1,73 @@
+{
+  "schema": "torch.dev/backlog-item/v1alpha1",
+  "id": "TASK-1e688a36-9df7-47ad-a540-99de15979717",
+  "title": "Implement the Kernel-owned pure persistent-service inventory API",
+  "description": "Bounded component phase of existing TASK-conversation-persistent-operations, explicitly requested by owner08d6cbe5 and current resume to name actual implementers for APIs that Kernel b3e17d6b proposed but did not implement and declined Release contribution to. Project Kernel is the implementer; Release is consumer, Runtime reviews launcher compatibility, QA owns behavioral truth and contributor permission. Proposed precise primary source is src/kernel/service-inventory.mjs (live ownership verified); first pin actual export/input/output/version/digest and constraints with Release/Runtime/QA before code. Any additional install/config source path needs an explicitly returned narrow map, not assumed scope. Implement only pure validated inventory/manifest-projection computation from declared inputs, no file/DB/service/provider side effects or config/schema changes. Preserve blocked reservation task125 owner/candidate/guard/history separately. This phase makes an actual separately qualified API available before Release consumption; no guessed export, full persistent-operations completion, unqualified landing, host activation, active runtime switch, live schema recovery or new identity.",
+  "priority": "high",
+  "affectedDomains": [
+    "project-kernel",
+    "release-self-host",
+    "provider-runtime",
+    "qa"
+  ],
+  "dependencies": [],
+  "acceptanceCriteria": [
+    "Kernel, Release, Runtime and QA pin a versioned pure inventory export with exact owned source paths, explicit input/output schema and digest/provenance binding plus named test contribution permission before implementation.",
+    "Valid declared schedules/services produce a deterministic manifest-owned inventory and preview projection including identity, declared lifetime, destination, timezone, missed-run/restart/budget/pause policy and content/config digests; absence of activation approval never becomes enabled or operational status.",
+    "Invalid or ambiguous project identity, lifetime, policy, destination ownership or stale digest fails closed or remains explicitly unresolved; unknown/user-edited integrations are preserved rather than claimed, removed or silently normalized.",
+    "Pure planning leaves input objects, filesystem, manifest, production DB schema/data, timers, processes and provider/wake state unchanged; no ControlPlane initialization, shell/systemctl invocation or host discovery/activation side effects.",
+    "QA approves exact additive boundary scenarios and contributor paths with deterministic declared inputs, fixed clock/timezone where applicable and Test Integrity Note; no existing assertion or snapshot weakening.",
+    "Actual implemented export and candidate commit/API contract are handed directly to Release/Runtime; fresh exact source checks, independent QA and serialized guarded integration are required before production consumption, with any schema/engine/tool refusal retained as a blocker rather than fixture promotion."
+  ],
+  "observedAt": "0fdfcb3b68e4511f2993d03e1fff8f89124b731c",
+  "feature": "Dormant persistent-operations component API",
+  "milestone": "Owned component qualification before Release integration",
+  "state": "blocked",
+  "owner": "project-kernel",
+  "evidence": [
+    "message:08d6cbe5-d561-4375-abff-19b13e490481:explicit-component-implementer/phase-direction",
+    "message:1849beb0-0c6a-4a4f-a3aa-90d3bfc7c2a8:current-delegated-coordination-and-resume-boundaries",
+    "ownership:src/kernel/service-inventory.mjs=project-kernel",
+    "TASK-conversation-persistent-operations:blocked5:unimplemented-peer-API",
+    "current-brief:d7e6d69:read-before-this-item",
+    "message:da0d22aa-0796-489f-b485-fd0c3dfef723:reviewed-unimplemented-Kernel-inbox-API",
+    "message:1dfe8f90-a381-469a-9041-915480cf4bce:QA-exact-inbox-source/test-consent",
+    "message:7abee039-9bde-4706-9876-4e50385d9ddb:actual-active-Runtime-dependency"
+  ],
+  "commit": null,
+  "integrationRequest": null,
+  "blockedReason": "Pure inventory export/input/output and exact QA contributor/scenario review remain pending. Actual Kernel da0d22aa confirms urgent Runtime inbox dependency observeMessages is unimplemented and requires separate Kernel-only assignment; prioritize that accepted API contract before the dormant inventory phase. Keep this actual inventory task/owner and full criteria, no simultaneous active Kernel item.",
+  "createdAt": "2026-10-01T10:51:05.872Z",
+  "updatedAt": "2026-10-01T10:56:37.323Z",
+  "revision": 4,
+  "history": [
+    {
+      "from": null,
+      "to": "proposed",
+      "actorId": "session-manager",
+      "at": "2026-10-01T10:51:05.872Z",
+      "note": "Task created."
+    },
+    {
+      "from": "proposed",
+      "to": "ready",
+      "actorId": "session-manager",
+      "at": "2026-10-01T10:51:26.631Z",
+      "note": "Fresh Kernel next idle, blocked reservation5 retained. Triage bounded actual Kernel API phase for the current approved dormant-service dependency. First actual export/contract/path/scenario review with Release/Runtime/QA; only then pure Kernel-owned module implementation. No other-owned edits or tests before named QA contribution consent; no live/schema/config/host/provider/installation actions or qualification shortcuts. Preserve existing branch/unique commits; exact source gates and independent QA/guarded integration required."
+    },
+    {
+      "from": "ready",
+      "to": "assigned",
+      "actorId": "session-manager",
+      "at": "2026-10-01T10:51:49.562Z",
+      "note": "Fresh native next readyTHISitem/no active Kernel item; actual Kernel branch clean at e8e33f1, preserve all unique reservation/design commits and blocked125 revision5. Assign Kernel as actual implementer for pure inventory dependency, not Release consume-only proposal. First pin exact versioned export/inputs/output/digest and additive QA contributor permission with Release/Runtime; no implementation before contract/scenario review. Proposed new primary src/kernel/service-inventory.mjs only; any additional source map returned explicitly and peer edits consented. Pure declared input/inventory/manifest-projection computation only, no ControlPlane construction, production schema/DB/files/host/service/provider/wake/installation changes. Kernel may resolve current Runtime inbox metadata consent as routine peer coordination without silently expanding this task; a separate implementation phase requires sequencing. Actual source qualification guard/tool refusals stay blockers; isolated attestations never real receipts. Return implemented exact API/candidate for independent QA and guarded landing before Release consumption. Arbiter alone starts provider turn."
+    },
+    {
+      "from": "assigned",
+      "to": "blocked",
+      "actorId": "session-manager",
+      "at": "2026-10-01T10:56:37.323Z",
+      "note": "Sequence actual higher-priority inbox API dependency, not completion or silent expansion of inventory/reservation. Kernel inventory remains blocked on genuine contract/QA boundary; existing reservation125 blocked5 preserved. A separately named Kernel observation implementation will have one active owner after fresh lookup. No code/host/schema/recovery/activation."
+    }
+  ]
+}

.torch/backlog/TASK-2b4a6ab5-c354-4bc0-b885-0f1f01c22022.json

@@ -0,0 +1,46 @@
+{
+  "schema": "torch.dev/backlog-item/v1alpha1",
+  "id": "TASK-2b4a6ab5-c354-4bc0-b885-0f1f01c22022",
+  "title": "Implement the Runtime-owned dormant launcher provisioning API",
+  "description": "Named next Runtime component phase for existing TASK-conversation-persistent-operations under owner08/current resume. Runtime2b4834f5 declined Release edits and offered an unimplemented API; Runtime is actual implementer, Kernel supplies pure inventory contract, Release consumes exact qualified export, QA owns truth/contributor consent. Sequence after Runtime's active unread-first task and Kernel inventory component; no second active Runtime assignment. Proposed narrow Runtime primary source src/schedules/dormant-plan.mjs (live ownership verified), with any additional launcher-path edits explicitly mapped/reviewed before code. First pin exact export/input/output/version/digest and dormant reconciliation effect boundary with Release/Kernel/QA. Implement pure declarative disabled-unit/dormant provisioning/reconciliation plan from validated inventory and supplied observed evidence; any fixture-only apply adapter must be separately explicit, hermetic and consented. No host actions, systemctl/linger/enable/start, provider launches/wakes, manifest/config ownership edits, DB initialization/recovery, installation switch or process/fence inference. Preserve blocked starting-presence task and old guard/receipt evidence. Independent source qualification and guarded landing precede Release consumption.",
+  "priority": "high",
+  "affectedDomains": [
+    "provider-runtime",
+    "project-kernel",
+    "release-self-host",
+    "qa"
+  ],
+  "dependencies": [
+    "TASK-e440d8c1-479b-418e-bb0f-a693594d891c",
+    "TASK-1e688a36-9df7-47ad-a540-99de15979717"
+  ],
+  "acceptanceCriteria": [
+    "Runtime, Kernel, Release and QA pin an actual versioned export, exact owned source/test paths and named contributor permission; no Release editing Runtime paths or consuming a merely proposed export.",
+    "Validated inventory and explicit observed-state inputs produce deterministic digest-bound dormant plans retaining declared lifetime/timezone/budget/restart/missed-run/pause and exact owned unit metadata, with every unit disabled and no operational/activation claim.",
+    "Repeated install/restore/upgrade planning is idempotent; unknown units, user edits, ownership/drift, unsupported destinations or stale source/config/artifact digests are preserved or explicitly blocked, never blindly overwritten/removed/adopted.",
+    "Planning/import has no filesystem/manifest/DB/process/systemctl/provider effects; disabled state cannot imply wake scheduling, active service, catchup permission or a trusted writer fence. Any fixture-only apply adapter remains hermetic and visibly isolated, without operational receipt promotion.",
+    "QA strict additive scenarios use temp home/project, fake systemctl and fixed clock/timezone; demonstrate no effects, dormant state, idempotence, preserved drift and explicit policy/no implicit catchup, with a Test Integrity Note and no weaker existing tests.",
+    "Runtime hands actual implemented candidate/export/version to Release after independent exact-source checks and QA acceptance/serialized guarded integration; record genuine incompatible-engine/schema/tool refusals rather than unqualified landing, fixture PASS promotion or host activation."
+  ],
+  "observedAt": "0fdfcb3b68e4511f2993d03e1fff8f89124b731c",
+  "feature": "Dormant persistent-operations component API",
+  "milestone": "After unread-first reliability and pure inventory API",
+  "state": "proposed",
+  "owner": null,
+  "evidence": [],
+  "commit": null,
+  "integrationRequest": null,
+  "blockedReason": null,
+  "createdAt": "2026-10-01T10:52:29.219Z",
+  "updatedAt": "2026-10-01T10:52:29.219Z",
+  "revision": 1,
+  "history": [
+    {
+      "from": null,
+      "to": "proposed",
+      "actorId": "session-manager",
+      "at": "2026-10-01T10:52:29.219Z",
+      "note": "Task created."
+    }
+  ]
+}

.torch/backlog/TASK-565fa463-c9b0-49e6-a902-9f12a49b6615.json

@@ -0,0 +1,62 @@
+{
+  "schema": "torch.dev/backlog-item/v1alpha1",
+  "id": "TASK-565fa463-c9b0-49e6-a902-9f12a49b6615",
+  "title": "Implement Kernel-bound consistent inbox observation for the unread-first MCP contract",
+  "description": "Actual critical dependency of assigned TASK-e440d8c1, not a second Runtime assignment. Runtime7abee039 reviewed wrapper request9a173a7b/c97e7983 requires consistent bound metadata; Kernel da0d22aa/954701d4 confirms no API exists and names Kernel-only observeMessages({recipient,selection,limit}) -> {recipient,messages,observation:{selection,requestedLimit,returnedCount,complete,truncated,pendingUnreadCount}}. QA1dfe8f90 explicitly authorizes Kernel only src/control-plane/service.mjs + test/fleet/control-plane.test.mjs for strict additive scenarios. Preserve existing readMessages ASC array/history compatibility, literal all visibility only, validate registered recipient/selection/integer limits and derive page/counts from one shared SQLite visible-predicate snapshot/statement without DML/ack. Exact source owned by Kernel; Runtime may only consume actual qualified export. Dormant inventory component1e688 is blocked4 on pending contract/QA and sequenced after this urgent dependency; reservation125 remains blocked5. No control-plane schema/version change, production DB initialization/recovery, migration, credentials, host/install/activation/provider/wake action. Additive test integrity note needs its separately confirmed destination or machine-readable review/PR note, not unconsented doc edits. Full exact-source gates, independent QA and guarded integration retained; fixture evidence cannot qualify production.",
+  "priority": "high",
+  "affectedDomains": [
+    "project-kernel",
+    "provider-runtime",
+    "qa"
+  ],
+  "dependencies": [],
+  "acceptanceCriteria": [
+    "Implement the exact peer-reviewed observeMessages API in Kernel-owned src/control-plane/service.mjs while retaining legacy readMessages ASC array/history behavior unchanged; only explicitly registered recipient, unread/history selection and integer limit 1..1000 are accepted.",
+    "Visibility is exactly existing addressed direct messages plus literal all, with unsupported group/foreign identity/invalid selection/noninteger/out-of-range requests failing closed through bound authorization; no caller state-root/DB handle/cursor bypass.",
+    "Return requestedLimit, returnedCount, complete, truncated and pendingUnreadCount with page/count/completeness from one shared SQLite visible-predicate snapshot/statement, deterministic createdAt/id ordering and explicit history versus unread semantics.",
+    "More than20 acknowledged historical messages plus newer direct/all unread handoffs yields correct unread selection/count/truncation; explicit history does not masquerade as a complete unread check, including empty/no-unread and boundary-limit cases.",
+    "Reading performs zero acknowledgement/message/task/ownership/DML mutation and no schema change; tests are actual strict QA-consented additive boundary checks in test/fleet/control-plane.test.mjs, preserve existing assertions and record a Test Integrity Note.",
+    "Kernel hands implemented exact export/commit to Runtime; qualify clean exact candidate through actual source checks and independent QA/serialized landing, preserving genuine schema/engine/tool refusals and distinguishing isolated tests from real-project receipts."
+  ],
+  "observedAt": "0fdfcb3b68e4511f2993d03e1fff8f89124b731c",
+  "feature": "Unread-first inbox dependency",
+  "milestone": "Before Runtime inbox integration and dormant service components",
+  "state": "assigned",
+  "owner": "project-kernel",
+  "evidence": [
+    "message:7abee039-9bde-4706-9876-4e50385d9ddb:Runtime-wrapper-contract",
+    "message:da0d22aa-0796-489f-b485-fd0c3dfef723:Kernel-owned-reviewed-API/separate-assignment-needed",
+    "message:1dfe8f90-a381-469a-9041-915480cf4bce:QA-exact-Kernel-source/test-contribution-and-strict-scenarios",
+    "TASK-1e688a36-9df7-47ad-a540-99de15979717:blocked4:sequenced-after-inbox",
+    "current-brief:d7e6d69:read-before-this-item"
+  ],
+  "commit": null,
+  "integrationRequest": null,
+  "blockedReason": null,
+  "createdAt": "2026-10-01T10:57:51.775Z",
+  "updatedAt": "2026-10-01T10:58:59.162Z",
+  "revision": 3,
+  "history": [
+    {
+      "from": null,
+      "to": "proposed",
+      "actorId": "session-manager",
+      "at": "2026-10-01T10:57:51.775Z",
+      "note": "Task created."
+    },
+    {
+      "from": "proposed",
+      "to": "ready",
+      "actorId": "session-manager",
+      "at": "2026-10-01T10:57:55.802Z",
+      "note": "Actual peer-reviewed urgent dependency of current owner-prioritized inbox slice. Kernel next idle after genuine inventory contract hold; scoped implementation only exact Kernel source and QA-consented test, no additional docs without permission. Preserve readMessages compatibility and all schema/reservation/actor guards. No live DB/schema/host/install/provider work or qualification waiver."
+    },
+    {
+      "from": "ready",
+      "to": "assigned",
+      "actorId": "session-manager",
+      "at": "2026-10-01T10:58:59.162Z",
+      "note": "Fresh current brief/ownership and native next readyTHIS/no active Kernel assignment after inventory blocked4; actual prior Kernel branch clean e8e33f1, preserve unique reservation/design commits. Assign actual da0/954701d4 observeMessages API dependency of e440. Implement ONLY src/control-plane/service.mjs plus exact QA1dfe-consented additive test/fleet/control-plane.test.mjs; keep legacy readMessages ASC/history array, one shared SQLite observation snapshot, strict registered recipient/selection/limit, literal all visibility, zero DML/ack and no source schema guard/version alteration. Return exact API/candidate and strict Test Integrity Note through agreed destination/review note; unconsented doc edits forbidden. Runtime only later consumes Kernel export, no Kernel contribution permission to Runtime. Fresh source gates/independent QA/native integration policy remain required; real schema/engine/tool refusal blocks qualification, fixture tests alone never PASS receipt. Inventory1e688 remains blocked4 contract pending; reservation125 blocked5 preserved, no duplicate active Kernel item or live DB/host/install/activation/provider action. Arbiter controls provider turn."
+    }
+  ]
+}

reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md

@@ -1,5 +1,118 @@
 # Current pilot remaining-work handoff
 
+## Current peer contracts and sequenced implementation at 11:04 UTC
+
+Canonical briefs still match `d7e6d69`; startup readonly DB failure was retried
+only with the narrowly authorized exact brief. Own branch starts clean at
+`b00f727`, canonical remains0fdf. Explicit own unread reads used
+`{recipient:"session-manager",unacknowledged_only:true,limit:100}` throughout.
+Owner **`1849beb0`** is read and acknowledged: arbiter resumed existing Runtime
+on e440 assigned3 and Work on pending read-only engine design; Console remained
+active. Historical idle presence timestamps are not current task/session proof.
+The latest human five-PNG permission applies solely to already completed Runtime
+recovery at286bfa72; no second overwrite, upgrade or schema recovery is implied.
+Approval75 remains pending, and wakes/install/schema/host/provider actions remain
+outside this turn. A foreign-area receipt list was refused by the bound identity
+guard (Manager cannot act as owner-console); no peer impersonation followed.
+Actual receipts are requested from the candidate owner, not inferred from refusal.
+
+Runtime **`7abee039`** gives a concrete wrapper contract: bound claimedIdentity,
+selection unread/history (default unread), explicit legacy boolean alias with
+conflicts refused, integer1..1000 limit, no caller group/root/cursor/ack authority.
+Observation returns selection, requestedLimit, returnedCount, complete, truncated
+and pendingUnreadCount. Kernel **`da0d22aa`/`954701d4`** confirms no implementation
+exists and names `observeMessages({recipient,selection,limit})`: registered
+recipient, existing direct+literal-all visibility, strict inputs and one shared
+SQLite visible-predicate snapshot/statement for page/count/completeness, zero
+DML/ack; legacy readMessages ASC array/history remains unchanged. Kernel refuses
+Runtime edits of its source. QA **`1dfe8f90`/`551a589d`** supplies actual exact
+contributor consent: Runtime tools.mjs + mcp-adapter.test.mjs + additive integrity
+note; Kernel control-plane/service.mjs + control-plane.test.mjs only. Strict
+unread/history/group/identity/limit/conflict/truncation and no-state-change
+scenarios remain intact. Earlier missing-proposal/QA waits are superseded.
+
+Actual implementation phases now have durable tasks and named implementers:
+
+- **`TASK-565fa463-c9b0-49e6-a902-9f12a49b6615` assigned3 to Project Kernel**:
+  implement the reviewed bound observation API and exact QA-consented test.
+  Fresh brief, live ownership and next idle→readyTHIS preceded assignment.
+  Kernel branch is cleane8e33f1 with unique reservation/design commits preserved.
+  Runtime keeps its same **e440 assigned3**, consuming the actual checked API
+  through the peer handoff; no Kernel edits or second Runtime assignment.
+  QA **8b7bc550 at11:00:54** additionally grants Kernel the exact additive
+  docs/TEST_INTEGRITY.md append for this fixed API contract; its note-destination
+  wait is resolved. This does not grant other paths or a schema/qualification waiver.
+- **`TASK-1e688a36-9df7-47ad-a540-99de15979717` blocked4, owner Kernel**:
+  pure persistent-service inventory API. It was separately assigned3 after
+  next-idle/ownership review, then genuinely blocked on its unreviewed exact
+  export/input/output/QA contract and sequenced behind the urgent inbox API.
+  Initial proposed source is kernel/service-inventory.mjs; no guessed export or
+  install/config mutation is permitted. Preserve its full criteria/history.
+- **`TASK-2b4a6ab5-c354-4bc0-b885-0f1f01c22022` proposed1**:
+  Runtime is the named future implementer of the dormant launcher API, dependent
+  on completed e440 and the qualified inventory task. Proposed narrow source
+  schedules/dormant-plan.mjs; exact export/effect/QA contract first. It is not
+  assigned while Runtime has active inbox work. Disabled declarative planning
+  cannot claim host activation, operational services or trusted writer fencing.
+- Release's existing persistent-operations remains blocked5 and is the eventual
+  consumer of independently qualified, landed APIs. QA **167f5c1b/cc381fd5**
+  resolves its test contributor prohibition for only the new persistent test,
+  under five strict SCNs: digest-preview/no-effects, disabled dormant provision,
+  idempotent install/restore/upgrade, preserved drift/uninstall, explicit policy
+  without catchup; hermetic home/project, fake systemctl and fixed clock/timezone.
+  Actual API implementations remain unavailable; the older blockedReason's QA
+  wait is historical and is not the current unresolved gate.
+
+Kernel reservation125 and Runtime starting-presence retain their original blocked
+owners/candidates/receipts. Owner **691c45e3** explicitly confirms the schema3
+candidate's eventual exact gate problem remains real. Pure planning/source work
+does not solve that production compatibility/writer-isolation gate. Every new
+phase retains exact-source/native checks, independent QA and serialized landing;
+preserve real refusals, no old-checker/fixture promotion or guard waiver.
+
+Work **2e53520a** delivered an actual three-class engine/adapter/attestation
+proposal. Owner **e736676a** identifies two substantive gaps. Manager **103900da**
+recommends a reusable exact engine with separately authenticated fixture and
+native contexts; immutable fixture attestations can never be copied/promoted
+into a native attempt. Digests authenticate bytes, not actors. Work must remove
+the fixture-only-versus-later-native contradiction and identify actual spec
+authority, QA scenarios, exact integration consumer changes and owner review for
+any qualification-policy change. Native landing currently requires real PASS
+receipts; prose does not authorize isolated-attestation landing. Task6e4 stays
+proposed/unassigned with its complete scope and downgrade refusal retained.
+
+Console's actual dirty files at10:54 are script dashboard driver, console.js and
+navigation test; source HEAD stillb5b5f10. Preserve those owned/consented edits.
+Owner **ba24f4e9** reproduces a secondary-section defect (#work→organization-
+proposals selects the view but leaves target1559px below viewport/no focus),
+missed by the existing nested-child test. Owner **3b12490e** separately confirms
+stale preview N→N+1 retains old revision/token/Confirm after refresh; this is not
+proof backend accepts a stale confirmation. The isolated no-screenshot probe is
+scoped diagnostic evidence, not live computer-use acceptance. Manager routed
+both to Console/QA (**8c14e149**, **73ef6a68**, **50480531**, **66f26929**).
+Approved console.js already owns apply(snapshot) and priority-preview handlers;
+start narrow revision-aware invalidation there, preserving unsent values and
+unchanged-current previews. No live-refresh.js/backend expansion is inferred;
+additional paths require precise consent. Keep strict section target/history and
+newer-evidence tests; don't weaken them to match the discovered bugs. Old frozen
+MCP receipts stay nonqualifying; amended clean/converged candidate needs four
+actual source CLI gates, existing valid user environment/provenance and independent
+QA. Real desktop/mobile browser acceptance remains separate and open.
+QA8b7bc550 independently reviews the isolated diagnostic and explicitly confirms
+the exact Console source/test/driver/note permission and both invariants. Its
+decision was routed directly; no backend expansion or live acceptance follows.
+
+Assessments before dispatch and after intake retain six specialists: eight Fleet
+recurring domain sets (the shared dormant-service set now includes five tasks)
+and ten historical Manager coordination requests. Better exact interfaces and
+named phases cover the measured friction; no role/domain activation. Backlog55
+integrity checks pass:39 proposed, seven blocked, six completed, two assigned
+(Runtime e440, Kernel565), one in_progress (Console), one active per specialist,
+all histories/revisions and dependency acyclicity valid. Health37 stale-observation
+and two resolved-dependency warnings remain, not auto-fixed. Own ACKs mean read;
+peer contract/implementation/qualification waits remain open. Checkpoint only
+reviewed Manager ledger/handoff, no feature/source or external publication claim.
+
 ## Current reconciliation and prioritized inbox assignment at 10:42 UTC
 
 Startup and pre-item canonical briefs match `d7e6d69`; the initial readonly DB