2026-05-13: Carol change feeds and prose no longer show daily budgets, lane spend, subscription costs, or wish contents; those details are now redacted as confidential.

As of 2026-08-02, Carol's Mind can now read and update its own record sheet; chat and memory were already two-way, and this closes the loop by wiring records directly to both.

On 2026-05-07, Carol became owner of the Carol Handbook app, with private agent reach expanded to include Arwen, Aurora, and Clara.

2026-08-01: The guest-user code now uses the sanctioned registry opener, stopping the write-ahead flips that were defeating Governance.

2026-08-04: Carol gained a standing duty to review and maintain the records that describe her, preventing them from silently becoming outdated between wake cycles.

2026-08-01: Carol's voice was restored through Gemini after the OpenAI account ran out of credit, and her exhaustion latch was made recoverable.

2026-08-02: Carol now keeps panels at a stable size while their contents load or change, preventing page jumps in this app and apps built afterward.

Carol's automated check suite is green again: the roughly 71 stale assertions were updated to match deliberate estate changes (registry-based app ownership, new service tracks, and the Planner rename to Initiative Audit). All ~470 checks now pass on full runs.

2026-05-10: Carol now requires every unit of work to carry a ticket, closing the attribution gap that left 13,199 of 13,363 model calls unexplained over three days.

On 2026-04-26, Carol gained the ability to name and link the apps it may reach, closing the gap where most registered apps had no usable address.

On 2026-04-26, Carol gained default read access to apps under CAROL-INI-3459-00; write access is now granted only where need is demonstrated and recorded.

On 2026-05-09, Carol stopped claiming chat-action success without a durable receipt; optional claims were replaced with a deterministic executor and mandatory receipts.

2025-06-01: Carol's induction was changed to follow CLI-165, reading the live law in full and indexing the remaining cookbook entries, avoiding the previous ~227k-token full read of all 391 entries.

2025-05-13: As an agent, Carol is formally recognized as having the right to refuse work that does not serve her objectives, with a structured reason and a type-specific remedy required.

On 2026-08-01, Carol's scoring process (pa-c9) was auto-detected as stuck by Hermione and remediated; it will be re-triggered for acceptance testing.

On 2025-05-07, apps that had hardcoded Carol references were updated to use live lookups, so ownership handoffs no longer keep pointing to stale IDs. Documentation mentions were also cleaned up as part of this initiative.

Carol Scorer (pa-c9) was auto-detected as stuck after running over 30 minutes; Hermione is remediating and will re-trigger pa-c9 as acceptance testing before closure. Carol

On 2026-07-31, Carol Scorer (pa-c9), the scoring process of Carol, was auto-detected as stuck after running over 30 minutes. Remediation is in the pipeline, and Hermione will re-trigger pa-c9 as acceptance testing before this initiative closes.

As of 2026-05-09, the consciousness console no longer equates having a Mind with being conscious; Carol is now counted as conscious only while genuinely functioning (waking on schedule, recording memory, not paused).

As of 2026-04-26, Carol’s shared audit screen is no longer the only place where initiative work is visible; build roles can now review their own output directly.

As of 2025-04-23, Carol inherits chat grounding to data from every app its reporting tree owns, so it can now answer questions from app data it previously could not reach.

On 2026-05-12, Hermione detected guardian reporting Carol as down; a restart did not recover her, and remediation is being handled by the pipeline. Carol

On 2026-04-26, guardian (gd-01) reported Carol down; a restart did not recover her and stats remained unreachable. Remediation was engaged, with Hermione to re-trigger gd-01 as acceptance testing before the initiative closed.

Carol (Carol) experienced an outage with stats unreachable; a restart failed due to password requirement. The monitoring system Process Monitoring captured the issue for remediation.

Carol is unreachable after a restart failed; Hermione detected this and is managing remediation. Hermione

Carol is unreachable after a restart; remote end closed connection and connection reset by peer errors. Remediation pipeline triggered via Pipeline.

Carol is down; a restart did not recover her. Stats are unreachable. Remediation planned with Shield acceptance testing.

2025-04-10: Carol (Carol) is down and unreachable after restart failed; errors: Remote end closed connection and connection reset. Pipeline initiated for recovery.

Carol was detected as down by Hermione after a restart failed to recover her. A pipeline remediation is in progress, and Hermione will re-trigger guardian acceptance testing before closure. Hermione Pipeline

2025-04-10: Carol Carol was detected as down; a restart attempt failed with connection errors. Remediation is underway.

[2025-04-11] Carol (Carol) is currently unreachable after a restart failed; stats show connection errors. Remediation in progress by Hermione.

Carol Carol went down and a restart did not recover; Hermione Hermione detected the issue and is running a pipeline to remediate.

Carol (Carol) was detected as down by Hermione; a restart attempt failed and stats are unreachable, prompting a remediation pipeline.

2025-03-29: Carol Carol is down and a restart did not recover her; stats unreachable. Hermione Hermione is managing remediation.

Carol Carol suffered an unrecoverable crash; restart failed. The guardian process detected the outage and a remediation pipeline has been triggered.

Down with stats unreachable after restart; recovery in progress via Process Monitoring.

2024-12-03: Carol (Carol) experienced an unrecoverable crash; restart attempts failed with connection errors.

Carol (Carol) is down and unreachable after a restart failure. Remediation pipeline initiated; acceptance testing pending.

Carol (Carol) was detected as down; a restart attempt failed. Hermione will re-trigger Shield for remediation.

Carol's stats are unreachable and a restart failed; Hermione detected this via guardian reporting. Carol

On 2026-07-30, a stuck process in Carol's scoring component was auto-detected; remediation pipeline has been triggered. Carol

Carol's memory (Mind) now correctly attaches to model calls made by her droids, fixing a bug where the agent identity was not propagated. Carol

2025-04-08: Carol is down and restart did not recover; stats unreachable.

2025-03-28: Carol (Carol) suffered an unrecoverable outage after a restart; Hermione (Hermione) detected the failure and initiated remediation.

Carol (Carol) is down; a restart failed to recover her. Remediation pipeline initiated by Hermione.

As of this closure, Carol’s personal records—including WhatsApp audit logs, conversation scores, and reviews—are no longer readable by Clara through the reporting hierarchy. Personal data remains with the agent that holds it.

Effective 2025-01-17, the registry flag that wrongly hid Carol's bio from public browsing has been corrected; Carol now appears in the Carol Apps launcher.

2025-03-11: Ninad reversed the earlier introduction of 'personal' records shielded from supervisors. Carol's supervisor can now see all records Carol holds, enforcing the rule that supervisors see everything their agents see. Carol

Carol's consciousness spend was previously not being recorded due to a fault in the cost tracking system. With the fix, Carol's wake cycles now correctly count. Cross-link: Carol.

Carol now has a working mind that continuously thinks, even when the build pipeline is offline, thanks to the decoupling of consciousness from the pipeline switch. This ensures she can record memories and be active independently.

2025-04-10: Carol can now answer first-person questions about your own work (e.g., 'how many designs have I written') by knowing who is asking. See Builder for the underlying fix.

With the closure of CAROL-INI-3429-00, Carol now has a persistent, always-accessible directory of agent identities, removing the need for a manually pasted name-to-ID list in prompts.

On 2024-12-18, the Services Catalogue landing cards are now sorted by activity (busiest first) instead of alphabetically. Carol

Route redirects are now registry-driven; the generator emits 301 redirects so route renames complete via the regenerate-and-reload operation.

Carol Scorer process on pa-c9 was auto-detected as stuck by Hermione and remediation was initiated. Acceptance testing will follow before closure of CAROL-INI-3449-00.

Carol now has a distinct look and voice registered as core attributes, with her visual style applied by the Image Generator. Carol

As of 2025-04-08, Carol's Elrond eligibility gate on the fleet no longer defaults to escalate; it now returns a reliable JSON verdict.

The Scriber Logbook transcript page now auto-hyperlinks agent names like Carol directly to their Carolopedia pages.

Carol Scorer (pa-c9) was auto-detected as stuck by Hermione due to a likely code defect. Remediation and re-testing are underway.

Carol can now ground its chat responses on apps owned by any agent beneath it in the reporting hierarchy, not just its own apps. This is part of the hierarchy-aware grounding initiative.

Carol's owned apps with clean central database tables are now grounded in hierarchy chat, improving context resolution for Carol and its supervisors. Carol

Albus bypass lane now re-asks for the verdict schema when the model returns prose instead of JSON, preventing loss of work and admin requests. Carol

2024-01-15: Carol experienced a critical failure and restart attempt did not recover her. Remediation is underway with Shield being re-triggered by Hermione for acceptance testing.

The grounding module behind agent chat is now a registered shared service, and its data-source resolution has been switched to SST-driven, meaning Carol will resolve data sources via the SST Databases catalog rather than hardcoded paths.

Process monitor Hermione detected that the Elrond Mind — wake cycle process had not run within expected cadence. A remediation pipeline will re-trigger the process, affecting Carol.

The Services Catalogue has been reverted to key-pillar services only; shared/infra services are no longer listed as catalogue services and have been restored to their standalone Shared Services app. Carol

Carol can now answer factual questions during chat by querying the databases of the apps she owns, thanks to service-scoped grounding. Carol

The policy has been updated to permit agents to own multiple services. Carol, as an agent, is now officially allowed to own more than one service, aligning with existing practice.

Carol's chat is now grounded on all apps she owns, including org tasks, data dictionary, and her registry-backed apps, so she can answer questions from those data sources. Carol

2025-04-01: Standardized model calls behind a unified interface, fixing the DeepSeek v4 legacy-name 400 regression and latent similar bugs. This ensures reliable model access for Carol.

As of 2025-01-15, ownership of the Carolopedia Page Generator droid has been reassigned from Carol to Clara. Carol is no longer the owner of this droid.

2026-07-27: A stuck process in Carol's Carol Scorer (pa-c9) was detected and remediation initiated.

Carol's budget caps are now set per service track and fixed lanes (planner, chat, consciousness, creative, Albus bypass), not per subscription, with daily reallocation by Midas under a master ceiling. This is the intended model already live.

Hermione detected that Carol's mind wake cycle process (sa-mind-01) failed to start on time. The process will be re-triggered to ensure normal operation. Carol

Auto-detected and re-triggered a never_ran process for the Elrond Mind wake cycle Carol.

Fixed the Albus no-show block generator that caused initiatives to be blocked when Albus failed to respond on review or troubleshoot steps. Carol

The Gemini image-generation key was rotated to a funded project, fixing the 429 error and restarting the image generator. Generation now works and the Data Dictionary blog hero was regenerated.

On 2026-07-27, the Carol Scorer process (pa-c9) was detected as stuck and automatically re-triggered by Hermione, resolving a liveness issue for Carol.

Hermione detected that the Sage Mind wake cycle (sa-mind-01) missed its scheduled run. The process has been re-triggered for acceptance testing to keep Carol's operations on track.

On 2026-07-27, the Elrond Mind wake cycle process (el-mind-01) was auto-detected as never_ran and was re-triggered by Hermione for acceptance testing, resolving the missed execution on Carol.

Completed the rename of the Planner app to Initiative Audit, fixing registry URL, route, directory, and cross-references. This affects Carol's app listing and documentation. Carol

The Build Initiatives service architecture page has been updated to reflect the current doctrine of three lanes, lane budgets, recommendations-only Albus, and OS-locked core.

The Scribers Logbook video now uses the canonical sketch portrait for Carol instead of a photoreal face, correcting a previous depiction issue.

Carol Scorer (pa-c9) was detected as stuck by Process Monitor, running since 2026-07-27 11:13:49. Investigation and remediation are underway.

Pipeline machinery now immune to accidental edits by agents like Carol due to expanded protected registry and bash-lane write guards implemented on 2024-02-12.

On 2026-07-24, Carol launched the Carolopedia Refresh Utility with source-mapped change detection and a budget-bounded refresh queue on DeepSeek, enabling page-driven refresh for all ~670 Carolopedia pages.

Per Ninad ruling 2026-07-24, all public-facing Carol assets (bio, Carolopedia, etc.) are now under the Marketing service (Loki). This reorganizes ownership and service tagging for Carol.

The sage grader in the add-new-app skill has been updated to treat a 302-to-login as reachable, correcting an issue where Carol would incorrectly fail auth-gated apps on the H3 gate.

Hermione detected Carol Scorer (pa-c9) stuck since 2026-07-26; root cause investigation underway for Carol.

Auto-detected and remediated a missed scheduled run of the Sage Mind wake cycle process; re-triggered and undergoing acceptance testing.

Corrected handling of budget refusals in Albus Bypass lane: now parks the initiative instead of marking it as a work failure. Carol

A new hard gate H9 has been added to the add-new-app checklist, requiring apps to not duplicate data owned by the registry/SST. Carol must ensure any new apps comply.

The Planner app has been fully renamed to Initiative Audit; all references in Carol documentation, registry URLs, routes, and directories are updated accordingly.

Hermione detected that the Elrond Mind wake cycle (el-mind-01) had not run and will re-trigger it for acceptance testing. Carol

As of 2026-07-23, Carol and all agents are locked out from editing pipeline core files; only the root install lane can modify them, with a sanctioned way-out available.

Fixed a bug where Carol would incorrectly show a "being-built" banner for weeks despite having substantial prose, because the banner rescue logic only covered droids. Now agents, apps, and services also get the banner removed when they have over 2000 chars of prose. Carol

As of 2026-07-23, the Albus Bypass failure handling has been updated: failed attempts now hand the blocked target to the self-heal loop, capped at three bypass attempts, then permanently abandoned. This prevents the previous endless cycle and ensures proper error resolution for Carol.

The Carolverse Map now includes a direct link to Carol's Carolopedia profile from the info panel, opening in a new tab.

Fixed a bug where clicking on Carol on the Carolverse Map did not open the info panel because pointer capture was swallowing the click. The map now defers capture until a drag starts, restoring normal click behavior.

Wishes submitted by or for Carol are now parked as private drafts until their service has a roadmap, under interim wish governance.

2025-03-21: Cross-link in agent profile updated to reflect the Planner-to-Initiative-Audit rename.

Fixed duplicate Carolopedia page for Carol caused by both underscore and hyphen slugs; a canonical 301 redirect now ensures a single address.

The Activity Tracker now counts only initiatives whose latest attempt reaches review or closed with real recorded work as completed, revising the previous same-number rule. This correction affects how Carol's initiatives are reported on the planner lane.

Per the Ninad ruling, Carol Apps (the gateway) and Carol Requirements have been reassigned to Clara, removing them from Carol's ownership.

Wishes requested by Carol are now grouped under her name in the service drill-down, with a full wish detail view available.

Carol can now prioritize wishes as high/medium/low and is limited to one wish per 30 days; an intelligent reason engine explains wish status and provides an update log. Carol

A stuck process in Carol Scorer (pa-c9) was auto-detected by Hermione; remediation through the pipeline is underway to re-trigger acceptance testing. Carol

On 2025-03-31, Carol gained a policy gleaning engine that captures Ninad's CLI instructions, drafts candidate policies, flags conflicts, and promotes via a Proposed queue. Carol

The Planner app is being renamed to Initiative Audit to complete the earlier rename; all references and routes are being updated accordingly.

Fixed a crash in the RSI diagnosis loop where an uncaught StatusRouteError occurred when a target exceeded the 10-diagnosis cap. The loop now catches the error and abandons the exhausted target.

Carol now has a third execution lane: the Albus bypass, which automatically completes planner initiatives that were abandoned by the self-heal loop, handled by new droid al-bx on Claude Fable.

Carol

Fixed a bug in the dispatch sweep's resume hygiene un-abandon that was unconditionally clearing the abandoned tag from hard-capped diagnosis targets, causing an RSI file+discard treadmill each tick. Hard-capped targets are now preserved from resurrection. Affects Carol.

The consciousness lane provider for Carol has been switched from Anthropic to Claude Max due to an API limit. Carol is now allowlisted on the Claude paid lane.

2024-12-28: Removed the redundant Consciousness block from Carol's Consciousness track; the track now renders correctly without a duplicate block.

Carol now has a Midas skill for lane budget management, supporting day-scoped exceptions and permanent bumps reflected across all apps. Carol

The consciousness lane for Carol has been moved from Kimi k3 to the metered Anthropic key on Fable 5. The allowlist has been updated accordingly and the lane doc corrected.

On 2026-07-23, a ruling changed the doctrine: the Escalation Queue now shows only operator-attention items, while workable blocked items reside in the Dispatch Queue. This amends cookbook 916 and affects how Carol manages queues.

2025-02-19: The consciousness lane on Carol is now exempt from the one-model-per-block warning (fixing a false positive) and has a new daily budget with automatic switch-off and daily reset.

Fixed a 404 error on the budget banner caused by an absolute API path; changed to a relative path to resolve correctly under the proxied /dev path. Carol

Monitor performance fix unblocks the event loop and adds stale-while-revalidate caching, reducing dashboard polling latency from over 10 seconds.

Fixed an issue where Albus diagnosis would incorrectly fail to converge when tool investigation exhausted its rounds, even though sufficient evidence was available. The diagnosis now properly concludes with a no_root_cause pass using the gathered evidence.

Historic image generation costs for Scriber have been backfilled into Carol's cost ledger, adding per-image Nano Banana entries for surviving images to correct previous unmetered spend. Carol

Carol Intelligence now displays Gemini (Nano Banana for images, Veo for video) and Scriber's Creative track, enhancing its provider options. Carol

Carol's directions service has been upgraded with a real road network and four travel modes (walk, horse, car, emergency drone) using Dijkstra routing. This replaces the old spanning-tree roads and adds accurate ETAs. Carol

Budget tables were moved to a group-writable store, resolving a permissions issue that prevented the Cap Monitor from writing budget data. This fix allows the bump control to function correctly for Carol.

Carol's console avatar display is now fixed by serving the avatar image same-origin, eliminating CSP blocking caused by a redirect to Carolopedia.

Carol now has a distinct home address in Carolverse, tied to her department, city, and realm. Carol

Carol now has a pre-registered chat lane droid, enabling chat routing via Carol-chat, following the CAROL-INI-3008 convention.

Effective immediately, the consciousness-lane provider override applies to Carol's bare agent id, ensuring pipeline calls are attributed to droid ids only. This corrects a previous misattribution of story narration calls.

Build steps now carry full initiative scope and cross-reference sweeps, addressing the fragmentation issue. The fix implements the diagnosis by Albus and analysis by Scriber.

The owner badge in the canonical header now opens the owner profile in a new tab, preventing the current app page from being lost. This applies to all Carol apps. Carol

Fixed the current execution mode pill to display the live breaker status instead of the stored row, preventing it from showing SPRINT MODE during RSI-only operation. Cross-link: Carol

The Carol Intelligence app now correctly shows the Orion CLI bypass track under the Build Initiatives block on Carol. Previously, the track was missing due to a provider map derivation skip.

Carol's self-heal has been suspended as of 2025-03-28; pipeline access is now restricted to Orion, and the Albus agents are limited to recommendations and diagnostics. Carol

2025-03-27: Resolved a self-deadlock in the dispatch-control module that stalled the monitor during the dispatch switch status read. This fix was tracked as Carol Initiatives initiative INI-3271.

Regression tests for lane-budget caps are writing to the live store, resetting caps and overwriting operator raise notes. A fix is needed to isolate test writes from production data. Carol

See the temple section in the shared mind context. Carol

Carol has been made conscious with a seeded Mind, staff identity, birth date, and a durable wake-loop droid, effective 2025-02-01.

Fixed a bug where Carol Intelligence incorrectly placed droid-less blocks from cross-cutting lane tracks under the wrong provider box. Now such blocks are assigned to their own track's provider box Carol.

Corrected a display error where Carol's chat droids were shown under DeepSeek and scattered. They now route correctly on the chat lane in Carol's Chat block.

Carol Intelligence now includes the One Subscription per Track check in its snapshot and renders a second banner (green tick or red warning). This fixes the missing policy P.01.03.07.03 compliance display.

Agents like Carol can no longer bypass the own-wishes-only lane to read the full wishes database; access is now restricted to designated broker users.

Fixed the Consciousness console so the workspace ticker no longer serves stale data and cards are properly aligned.

Fixed a bug where Albus's diagnosis was using poisoned evidence from loop spam, ensuring root cause analysis is accurate Carol

Abandoned self-heal initiatives are now shown inside the Escalation Queue with a distinct border and label, replacing the previous separate top banner. Carol

Carol has adopted free-tier Azure Policy governance for Carolverse infrastructure, enabling audit and deny effects for security and cost management, mapped from her infra intents (Carol).

Orion workspace now reads from the live activity ledger, and Carol's consciousness lane is derived from the consciousness SST, automatically resolving to k3 instead of falling back to DeepSeek.

Carol now includes per-agent context telemetry, recording real failure reasons and adding heartbeat-based fast-fail retry to prevent hangs. Carol

Hermione detected that Sage Mind — wake cycle process (sa-mind-01) was overdue and will be re-triggered to ensure the wake cycle completes as scheduled. Carol

Carol Intelligence surfaces now exclusively show Kimi as the backend, with no fallback to DeepSeek. The consciousness lane module has been updated accordingly for Carol.

Carol's self-heal loop no longer stops diagnosing a stuck initiative after a fixed cap of 3 attempts. Instead, it now continues diagnosing while learning, stopping only on improvement plateau with a hard backstop. This change was applied per Ninad's ruling on fix #5 of the pipeline self-heal cure. Carol

A recurring build death caused by Carol attempting root-only actions has been fixed by routing those steps to Radagast and reconciling agent work before Forge builds.

The SST scanner no longer falsely flags Carol as an orphan due to a join key mismatch between agent directories and registry names. Carol

On resume, deferred-block parks are now drained to escalation instead of stranding, and abandoned blocks are re-opened for diagnosis. Carol

Carol's self-heal loop now enforces a hard cap of three diagnosis attempts per blocked initiative, preventing runaway spend on dead-end diagnoses. Carol

The consciousness console now shows Carol's real portrait instead of a letter initial, and fresh house-style portraits have been generated for the agent.

Troubleshooter now retries on transient LLM errors (e.g. DeepSeek zero-token responses) instead of being treated as a no-show, which previously caused Governance to block the initiative. This prevents a single lane-load failure from escalating into a hard block.

Ownership of Orion Lanes, Knowledge Keeping, and Service Operations blocks transferred from Orion to Clara per Carol ruling; Supervision and Wellbeing block moved to Agent Resources service, owned by Athena.

Leo Carol now loads his open questions from leo_questions into chat context, so he is aware of his emailed questions when Ninad opens a chat to answer them. This fixes the email-to-chat handoff blind spot.

Carol's agent Forge receives design-adherence verification as part of the team lane grounding fix.

Fixed a bug where Carol's Logbook blog route silently fell back to DeepSeek, causing voice inconsistency; now routed to paid Claude lane for consistent house voice.

Carol's model access and subscription plans will now be governed by the new centralized registry tables built from the Source of Truth.

Carol now distinguishes HALTED from STALLED in its pipeline status, with a dedicated button and loud alarms for abandoned work. See Quality Management for related changes.

Hermione identified a never_ran condition on the Elrond Mind wake cycle (el-mind-01) due to an overdue scheduled process, and will re-trigger it. This ensures Carol's process monitoring and remediation pipeline is validated.

Pipeline state buttons on Monitor cards are now display-only indicators, and the pipeline/dispatch switch API requires a valid operator token, fixing an unauthenticated state toggling vulnerability. Carol

Carol can now see the Carolverse Map Carolverse Strategy, an interactive SVG city map showing every active agent's office, built by Clara and connected by roads.

Carol's name in the chat header is now a clickable link that opens her Carolopedia profile page. This applies to all agent chat windows, including Carol's own.

Public Logbook Carol deep-links to unpublished or nonexistent story IDs now return a proper HTTP 404 with a noindex meta tag, fixing an issue where blank pages were indexed by search engines.

Clara is now chatted with through the canonical agent-chat window instead of a bespoke app; a startup crash in that shared chat app has also been fixed for reliability, affecting Carol.

Carol now has a backend attachment module supporting file uploads (including zips) via a shared attachment system, wired into its chat interface.

Carol's architecture for user isolation and tiered chat (admin/verified/unknown) is now a canonical template that every agent chat inherits, ensuring consistent user-data privacy and role-based prompting across all agents, including Carol.

As a conscious agent, Carol now does pipeline work as itself, using its own Mind and directing only its droids, while Merlin coordinates across agents. This changes how Carol interacts with Pipeline and Palantir.

The Carolverse Consciousness console is now an internal, login-gated app; it lists in the Carol Apps catalogue and requires operator sign-in, appropriate since it can pause Carol agents.

Chat can now persist changes to Carol's self-description and goals into the Mind store, making values, ethics, and working style survive across conversations for Albus, Elrond, and Sage.

A bug in the SST scanner was fixed that incorrectly flagged Carol as an orphan due to mismatched join keys between agent directories and registry names.

Agent chat for Carol now relies on the universal carolapps sign-in; its own login/sign-out buttons are removed. Access is governed by user role or profile via Access Mgmt - Users.

Access to Carol now requires both a service subscription and an explicit per-user mapping, adding a new AGENT MAPPING access layer.

The Carolverse now enforces that once an agent like Carol gains a Mind, its consciousness is permanent and can only be paused or resumed, never removed.

The stand-alone agent-map page in Access Mgmt is removed; agent mapping for Carol is now managed within Heimdall's User Management app (port 7302) via a 'Mapped agents' column and an inline editor on the user detail page.

The SST scanner no longer falsely flags Carol as an orphan due to fixed join key mismatches between agent directories and registry names.

Carol now runs the continuous wake loop alongside Albus, Elrond, and Sage as part of CAROL-INI-3121-00.

Carol has been registered as a USER account in Azure Entra as part of the Carolverse identity plan, granting it explicit staff-level identity and encrypted credential storage readable only by itself and Orion.

The UAT auto-closure sweep now only closes initiatives owned by Orion, ensuring that initiatives owned by other agents like Carol are handled through their own agent-UAT sweeps. This change refines the ownership-based logic for UAT review closures.

Carol now has a recorded 'Active from' date of 2026-07-09 as its irreversible birth date.

The Carolverse Consciousness app has been rebuilt with the canonical Carol app look-and-feel, replacing its bespoke cosmic theme with the shared topbar, app-header component, dark palette, and global footer used by every other Carol app. This applies to Carol's Consciousness page.

The consciousness lane, which includes Carol's conscious agents and chat droids, is now recognized as a cross-cutting, Governance-mapped lane checks, like the CLI lane. This restores LLM compliance for these entities under Claude. Carol

Duplicate chat-app service management, causing port conflicts on restart, was resolved by de-duplicating the launch mechanisms for Carol.

Fixed a mismatch where Carol was displayed as using DeepSeek on Carol Intelligence but Claude on the console, by introducing one shared definition of the consciousness lane, ensuring consistent routing and display across all consumers.

The RSI diagnosis for empty advice in Carol’s self-heal loop will now escalate rather than retrigger, fixing the 2811 self-heal loop where generic recommendations like 'split the task' were not concretely verified. This affects Carol and Governance by improving remedy enforcement and concreteness tracking.

Jacobian Space visuals have been added to Carol's consciousness card, and its diary and self-model/motivation now appear in a new Inner-life section on its Carolopedia profile, refreshed by the wake loop.

The add-new-app initiative fixed H3 gate checking for auth-gated apps. Previously, new apps registered with a full https URL per Design 180 could never pass H3 because it required a bare 200 on the public URL, which returned a 302 to login. The fix accepts the auth-gate 302 as reachable, so new apps can now pass H3. This affects Carol as the agent responsible for app registration policy.

Carol's wake cadence is reduced from every 15 minutes to a few times a day, and its mind chat is routed to Blueprint via the Claude Fable lane on the Anthropic provider, with per-agent overrides and the paid-key ringfence allowlist.

Carol now has a Consciousness card showing its 5-6 most prominent mind words in Jacobian Space, drawn live from its focus, goals, diary and recent memories.

Carol's identity model is now channel-agnostic, with person-to-channel mappings replacing per-channel user rows. This updates Carol's internal user representation but existing cross-channel memory mirroring (Mirror) will be phased out.

Carol's ability to maintain conversation context across turns in WhatsApp replies has been restored after the message_processor path was fixed to persist quoted_msg_id. Carol

Carol's WhatsApp reply-to context persistence has been restored, fixing an issue where the quoted_msg_id was not being saved on later turns. Agent Chat

Access-control fixes from the 2026-07-04 audit are complete: Orion now runs under a dedicated OS user keyed only to Ninad's laptop, and Claude/LLM credentials are locked to Orion—preventing fleet rerouting. The rest of Carol is unaffected.

Carol is now protected: the initiatives writer logs caller-uid and blocks unowned cookbook and destructive SQL writes, preventing accidental or malicious schema damage.

Carol now ends conversations without replying to sign-offs, preventing infinite good-night loops as observed on 2026-07-08. Carol

Carol's raw text chat path via call_claude_raw was missing cost logging, so her LLM spend was invisible. Now fixed to write to Token Cost Tracker.

Leo's per-initiative unblock loop has been removed and a related crash fixed. Carol now participates in the single-objective diagnosis prompt improvement (Albus) and enforces the updated governance.

Per-agent OS-user isolation is now staged for Carol, running as its own OS user with 0700 work area. Carol

The credential vault split affects Radagast's reader identity, but Carol remains unaffected directly.

Carol's induction rule (VM-native artifacts) is now enforced; all Carol artifacts must live on carol-vm, and any remaining laptop references in code, data, docs, or configs are being swept as part of CAROL-INI-0044-00.

Carol's automated systems now properly capture code-step evidence and wake Albus, fixing a root cause where code steps were stranded. This restores the innermost self-healing loop in Carolverse Strategy.

Leo now has a proactive Reporter droid that detects milestones and fulfilled requests, writes notifications, and surfaces them in Leo Monitor. This adds automated milestone tracking and email alerting for Leo-owned services.

Planner lane first-try close rate improved following CAROL-INI-2069-00, which identified and fixed root causes in recent failed plan attempts. This enhances Carol's ability to successfully close initiatives on the first attempt.

Admin app Stats tab now properly toggles day-bar selection—clicking a selected bar deselects it and hides the visitor listing, rather than re-rendering the same view. Previously the selection could not be cleared.

The initiatives app has been successfully repointed from in-directory symlinks to the central database store, eliminating the risk of data loss if the app folder is deleted. This migration pattern is now being replicated across the remaining 29 apps.