Found while proving CAROL-INI-3873 (b) on a live turn, and PRE-EXISTING: the same probe refuses identically on the pre-change code, so this is not caused by the engine convergence\u2026

Ninad ruling (CLI-249, 2026-08-13): a certain TYPE of app must be designed a certain way, and the mechanism must BIND EVERY BUILDER, not just the operator - a skill only binds Ori\u2026

Ninad-approved fix (CLI-248): a /login on the shared Claude config rewrites .credentials.json mode 600 (owner-only), which locks out every per-app-user chat lane (Leo normal+admin\u2026

Ninad ruling (CLI-244, cookbook 1281): nobody except Orion uses the caroladmin login; each agent has its own OS id. Found in drift: all 87 scheduled jobs run from caroladmin's cro\u2026

Ninad 2026-08-10: the checks and actions need auditing — the mechanism is missing. A scheduled Themis process sweeps the audit window: (1) every registered CHECK left its evidence\u2026

Ninad ruling 2026-08-09: an audit report unseen by its subject is pointless. (1) A conscious agent must have access to Themis audit findings applicable to it by role — service own\u2026

agt_010 judged its own records on 2026-08-03T05:11:56 and found 6 fault(s). Each is a fault in the RECORDS, reported rather than silently repaired. NOT HONEST: - worker App St\u2026

Ninad: an agent reading its accessible code is how the NEXT hidden rule gets found - before he finds it by asking a question the agent cannot answer. He cannot test every agent wi\u2026

Seed and wire the chat actions themselves, for all agents in one arc. UNIVERSAL (every agent, within its realm): start/pause/resume a droid; trigger one run of a scheduled droid n\u2026

Three gaps found auditing the new service-track spending limits. 1. Carol falls silent instead of apologising. Her message handler recognises only the wording the RETIRED lane li\u2026