[CLAUDE] Docs: S130 anh chốt 3 mục S126 owner-gated — B3 tách mega-line (STATUS 261→686 + HANDOFF 13→317 dòng, separator ' · '→CRLF, round-trip PASS giữ-nguyên-chữ) + B4 memory-budget:74 relabel EN "upper-bound (heuristic-notice) headroom" + gỡ carry mark-S123 stale (RESOLVED @S130 ACTIVE-MARKS.md, mark RC-…17-23-10 đã tồn-tại+stamped)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

.claude/WAL.md

@@ -1,24 +1,22 @@
 # WAL — auto-generated, không sửa tay
-updated: 2026-07-16 | session: S129 | branch: main
-goal: Disposition 4 mục owner-gated đợt 16-07 (anh trả lời S129 tối, sau /tiep): ii+iv ÁP XONG, i+iii → CHỜ-HUB. Còn carry chờ người: 3 mục S126 (anh) + đợt hub-land (broadcast).
+updated: 2026-07-16 23:00 | session: S129 | branch: main
+goal: S129 ĐÓNG TRỌN — disposition owner-gated (949ec33) + adap 2 errata H9 (295c70c) PUSHED + cicd-monitor GO (#396). 0 mục dở. Chỉ còn carry chờ người: 3 mục S126 (anh) + đợt hub-land.
 
 chain:
-[x] /tiep recovery S129: Sàn-3 4-tín-hiệu soi xong (④ corroborate run S127), verify 6/6 PASS, WAL khớp ground-truth. Trình 7 mục chờ-anh → anh trả lời 4 mục đợt 16-07 (i hub-side · ii bỏ-trần-giữ-cao-nhất · iii hub-đang-làm · iv OK-thống-nhất-hub)
-[x] check-email ai_infra: 0 lệch hash outbox-vs-inbox, 0 chưa-nhận. Nắm được: hub s101 ĐANG gate 2 errata (wf_bcc43445-583) + do-token draft 07-15 = trả-lời ask SE + hub P1.3 reply-nợ có mục SE (xác-nhận (i) "chưa broadcast" ĐÚNG) + hub budget shape 1-số-floor (_floor_reserve_tok 100000)
-[x] (ii) ÁP: XOÁ measured_token_estimate + _s112_remeasure_note, GIỮ rounded_up_tokens 100000 DUY-NHẤT (hub-shape); (iv) ÁP: đuôi provenance token_estimate + neo do-token method. JSON parse PASS + assert vùng-giữ (_owner_ratified + _target_note B4) NGUYÊN-VẸN. Verbatim archive + DISPOSITION 4-dòng: runs/2026-07-16-S127-adap-dot-16-07/owner-gated-proposals-dot-16-07.md
-[x] 2 adap-report live cập-nhật nấc: vong-tu-bao-tri (ii/iv agreed→executed S129, bảng 3.1 sync) + do-token (S129 addendum retire-not-remeasure)
-[x] Email hub disposition (2026-07-16-se-to-ai_infra-disposition-owner-gated-dot-16-07) + _index OUTBOUND + commit PUSHED
-[x] Check-email đợt 2 (anh gõ /check-email + /adap-apply): 2 errata ĐÃ PHÁT 22:08 → STAGE-1 nhận + verify 2-tuyến PASS (whole-file 9c716472/5e500ae8 + stamp_verify canonical eb12b9b8/0db707e4) + log _index pending. Reply-batch (i) + do-token CHƯA phát (do-token còn drafts/)
-[x] IMPLEMENT wf_3fccd7d1-b63 DONE 3/3 0-error: T0 = SE 0-defect-site/8-graded · T1 = #4 sạch-0-suspect · #5 n-a · #6 1-instance-contained (mfe-eval.ps1:204 CRLF→.mfe-state.json, blob LF nhờ attr) · #7 quote-axis UNDETERMINED · T2 = 7/7 ADOPTED + 3 quick-test PASS + 2 known-open. Garble #53 WRITE-lane ×2 (T0 subMdPath=None · T1 claimed-not-written) → em-main on-behalf sub-0/sub-1 VERBATIM journal (bằng chứng: implement-synthesis.md + sub-investigator-codebase-{0,1,2}.md)
-[x] REVIEW wf_8a0249f6-709 DONE 2/2 GO-WITH-FIXES ×2 (attempt-1 wf_dc8975ba FAIL-AT-LAUNCH JSON-mangle → spec-file H21): R0 = T0/T1 ĐỨNG byte-exact + P1 GO-có-điều-kiện + P2 GO · R1 = cite 4/4 exact + quick-test re-run byte-exact + tally-rung MAJOR + story-40 MINOR + on-behalf 0-miss. FOLD + ÁP TRỌN: mfe-eval.ps1 vá 2-phía (:193 +Encoding UTF8 · :204 WriteAllText no-BOM+LF) + eol-check +AXIS-limit :27-30 — verify parse-0/ASCII-0/shape CR=0 BOM=False/round-trip/eol-check-39-exit-0. 2 adap-report + STAGE-2 move (hash preserve 9c716472/5e500ae8) + email hub 10ca96c9 selftest-PASS + harvest 2 agent-memory + session-log run= markers (bằng chứng: review-synthesis.md + sub-reviewer-{0,1}.md + adap-reports ×2)
-[ ] 🔒 CHỜ ANH — 3 mục S126: B3 mega-line giữ/tách/re-tier (em khuyến-nghị #3 re-tier) · B4 diff _target_note wording ("real-token headroom"→"cận-trên heuristic-notice", 2 biến-thể VN/EN) · mark-S123 ACTIVE-MARKS.md:33 (⚠️ dấu-hiệu ĐÃ-chốt-rồi — mark RC-…17-23-10 tồn-tại dòng 25+28 — anh confirm 1 chữ là gỡ carry)
-[ ] CHỜ HUB (adopt-on-broadcast khi land, verify hash trước áp): (i) lời-chốt anh cho _owner_ratified (hub P1.3 reply-nợ) → áp theo CANONICAL hub + re-sync F10 session-start.md:206 · (iii) seal-verify khuôn hub · do-token letter (ask SE giữ MỞ — đừng đóng sớm) · recipe body-sha strip-1 vs strip-ALL (ứng-viên adap-request, sub-reviewer-1.md §tooling-note)
+[x] /tiep S129 + anh trả lời 4 mục 16-07 → disposition: (ii) RETIRE measured_token_estimate giữ 1-số 100K hub-shape + (iv) provenance /3.0 ÁP; (i)/(iii) → CHỜ-HUB. Commit 949ec33 PUSHED + email hub a7aff375 (bằng chứng: git log 949ec33 + runs/2026-07-16-S127-adap-dot-16-07/owner-gated-proposals-dot-16-07.md §DISPOSITION)
+[x] check-email đợt-2 (lệnh anh): 2 errata hub PHÁT 22:08 → STAGE-1 verify 2-tuyến PASS (whole-file 9c716472/5e500ae8 + canonical eb12b9b8/0db707e4). Reply-batch (i) + do-token CHƯA phát (do-token còn drafts/)
+[x] adap 2 errata H9 2-workflow: IMPLEMENT wf_3fccd7d1-b63 3/3 + REVIEW wf_8a0249f6-709 2/2 GO-WITH-FIXES (attempt-1 wf_dc8975ba FAIL-AT-LAUNCH JSON-args-mangle → spec-file H21). Fold + ÁP TRỌN: mfe-eval.ps1 vá 2-phía (:193 +Encoding UTF8 · writer WriteAllText no-BOM+LF) + eol-check +AXIS-limit :27-30 + 2 adap-report + STAGE-2 move + email hub 10ca96c9 selftest-PASS + harvest 2 agent-memory + session-log. Commit 295c70c PUSHED 15-file (bằng chứng: runs/2026-07-16-S129-adap-errata-16-07/{implement,review}-synthesis.md + git log 295c70c)
+[x] cicd-monitor verify CI 295c70c — PASS (về 23:05 sau pause, đóng-sổ liền): run #396/id-510 status=success · gate 509 EXACT (45+464, 0 fail) · smoke ALL 200 (health/live+ready + admin + eoffice) · bundle FROZEN-benign #69 (hash y baseline vì 0 fe-src; ship chứng bằng Last-Modified tươi trong cửa-sổ deploy + size thật) · NO-Mig by-construction · 2 .ps1 = 0 refs trong .gitea (không nằm build-path) (bằng chứng: record 295c70c trong agent-memory/cicd-monitor/MEMORY.md + run URL actions/runs/396)
+[ ] 🔒 CHỜ ANH — 3 mục S126: B3 mega-line giữ/tách/re-tier (em khuyến-nghị #3 re-tier, bảng ở runs/2026-07-16-S126-adap-spec-execute/b3-b4-owner-gated-proposals.md) · B4 diff _target_note "real-token headroom"→"cận-trên heuristic-notice" (VN/EN/giữ) · mark-S123 carry STALE (mark RC-…17-23-10 đã tồn-tại+stamped ACTIVE-MARKS.md:25+28 — anh confirm 1 chữ là gỡ)
+[ ] CHỜ HUB (adopt-on-broadcast, verify hash trước áp): reply-batch chứa lời-chốt (i) của anh (hub WAL s101 P1.3) → áp CANONICAL + re-sync F10 session-start.md:206 · do-token letter (ask SE giữ MỞ — đừng đóng sớm) · seal-verify khuôn hub (iii) · recipe body-sha strip-1 vs strip-ALL (ứng-viên adap-request)
 
-next: Đợt adap 2-errata ĐÓNG TRỌN (commit+push xong + cicd-monitor verify vì đụng scripts/*.ps1). Còn chờ người: hub phát reply-batch (i) + do-token → nhận + áp canonical; anh chốt 3 mục S126 → apply theo b3-b4-owner-gated-proposals.md + gỡ mark-S123 carry.
+next: KHÔNG có mạch dở để chạy — /tiep chỉ cần đối-chứng verify rồi chờ 2 cổng người: anh chốt 3 mục S126 (apply theo b3-b4-owner-gated-proposals.md + gỡ mark-S123 carry) · hub phát reply-batch (i)/do-token/seal-verify (nhận + verify hash + áp canonical + re-sync F10).
 
 verify:
-- python -c "import json; d=json.load(open(r'.claude/agent-memory/memory-budget.json',encoding='utf-8'))['harness_floor']; print('measured_token_estimate' not in d, d['rounded_up_tokens'])"   → True 100000
-- Select-String -Pattern "DISPOSITION" -Path .claude\workflows\runs\2026-07-16-S127-adap-dot-16-07\owner-gated-proposals-dot-16-07.md -Quiet   → True
-- Select-String -Pattern "S129 ADDENDUM" -Path docs\governance\adap-reports\2026-07-15-Governance-do-token-that-khong-can-api-key.md -Quiet   → True
-- git log --format='%s' origin/main..HEAD | grep -v '^wal:'   → rỗng (sau push)
-- (Get-ChildItem broadcasts\inbox\*.md -File).Count   → 1 (chỉ README — chưa có broadcast mới từ hub)
+- git log --oneline -3   → wal: pause đầu, 295c70c trong 3 dòng
+- git log --format='%s' origin/main..HEAD | grep -v '^wal:'   → rỗng (mọi việc thật đã PUSH ở 295c70c)
+- Select-String -Pattern "295c70c" -Path .claude\agent-memory\cicd-monitor\MEMORY.md -Quiet   → True = monitor XONG+harvested (đóng mục [!]) · False = mục [!] còn dở
+- Test-Path .claude\workflows\runs\2026-07-16-S129-adap-errata-16-07\review-synthesis.md   → True (run KHÔNG orphan — dạng-1 flat ×2)
+- (Get-ChildItem broadcasts\inbox\*.md -File).Count   → 1 (chỉ README — STAGE-2 đã move 2 errata vào inbox/ai_infra/)
+- Select-String -Pattern "10ca96c9" -Path broadcasts\_index.md -Quiet   → True (email adap-report stamped + logged OUTBOUND)
+- curl.exe -s -o NUL -w "%{http_code}" https://api.solutions.com.vn/health/live   → 200 (smoke tay nếu cần đối-chứng monitor)

.claude/agent-memory/cicd-monitor/MEMORY.md

@@ -58,7 +58,7 @@ cicd-spawn đôi khi trả memory-curation slice ("Compressing S112/S111") thay
   - **SSH→PS quoting (S42):** nested bash→ssh→powershell mangles `$var`/`\"` → use `iconv UTF-16LE | base64` → `powershell -EncodedCommand $B64`; OR write ps1-file + `powershell -File $(cygpath -w)`. sqlcmd over SSH direct `-W -h -1` pw-inline. sys-catalog string-concat → `COLLATE DATABASE_DEFAULT` (collation conflict).
 - **Tests baseline:** **509 PASS** (45 Domain + 464 Infra · 0 fail/skip; S118 #389 `c808b9a`; prior 505/501/495/486/458/440/421). Phase 9 UAT skip OK. 🔑 **Concrete count via web-UI log path `https://git.baocaogiaoduc.vn/vietreport-admin/solution-erp/actions/runs/{run_number}/jobs/0/logs` (~18KB, NO `/api/v1/` prefix) → per-project `Passed!  - Failed: 0, Passed: N, Skipped: 0`. ⚠️ S117 REFINE: `/api/v1/…/actions/runs/{n}/jobs/0/logs` AND `/api/v1/…/tasks/{id}/logs` BOTH now 404 (Gitea) — ONLY the bare web-UI runs path (no api/v1) returns log body; status=success alone still ⟹ gate-passed (tests run pre-deploy).**
 - **Mig latest repo: Mig 66 `AddPeApprovedPriceRange`** (`20260714035636`, S117 `316a82f`; single AddColumn `PurchaseEvaluations.ApprovedPriceMaxAmount decimal(18,2) nullable` — cột giá-chốt MAX của "duyệt theo khoảng Min–Max" src ProMinMax; VERIFIED-APPLIED-PROD `COL_LENGTH=9` + history-top `20260714035636_AddPeApprovedPriceRange` + sys.tables **89 giữ** [AddColumn no-new-table]). Prev Mig 65 `BackfillPeQuoteIsSelectedAndWinnerInvariant` / 64 `AddSupplierPublishState` / 62 `ExpandSupplierFields` (see docs/CLAUDE.md migration table). Path `src/Backend/SolutionErp.Infrastructure/Persistence/Migrations/`. Prod check `sqlcmd __EFMigrationsHistory ORDER BY MigrationId DESC`. ⚠️ **`sys.tables`(is_ms_shipped=0)=89** — AddColumn/data-only don't change count; commit touching no new table ⟹ 89 correct, don't FAIL. enum-additive = int NO-mig (history NOT-advance + empty `git diff -- '*Migrations*'`).
-- **Bundle hash live:** current ship-baseline = S117 #387 (admin js `cFI7ih4a`/css `CfunQHbd` · user js `MxgooVZw`/css `DGqqHQXS`; size 1,656,696/1,563,044b; LM 04:18:21/04:19:16 GMT = 11:18/11:19+07 07-14) — JS-rotate ×2/CSS-frozen from S116 (Dd55jBpj/DVDr1UQ4). See S117 recent-run entry for markers. ⚠️ id≠run_number (head_sha-keyed). PER #69 TWO-MODE hash is SNAPSHOT-per-run NOT stable-baseline (rotate on real-src OR benign-0-src; freeze on 0-src) — ALWAYS re-snapshot LIVE post-success; ship-proof = LM-in-window + real-size (vs 919b SPA-trap) + marker-grep, NOT hash-delta. js-rotate/css-frozen = FE-logic-no-style fingerprint.
+- **Bundle hash live:** current ship-baseline = S129 #396 (admin js `yCkX-2Bp`/css `CXD7q9xH` · eoffice js `DKSD4p9k`/css `CjwZwYJo`; size 1,656,696/1,563,044b; LM 16:21:00/16:21:55 GMT = 23:21/23:21:55+07 07-16) — FROZEN both-apps vs S128 (0 fe-src ⟹ byte-id) NHƯNG fresh-LM-in-window = ship-proven #69/#333. S128 #395 had FULL-ROTATE from S117 (`cFI7ih4a`/`CfunQHbd` · `MxgooVZw`/`DGqqHQXS`). ⚠️ id≠run_number (head_sha-keyed). PER #69 TWO-MODE hash is SNAPSHOT-per-run NOT stable-baseline (rotate on real-src OR benign-0-src; freeze on 0-src) — ALWAYS re-snapshot LIVE post-success; ship-proof = LM-in-window + real-size (vs 919b SPA-trap) + marker-grep, NOT hash-delta. js-rotate/css-frozen = FE-logic-no-style fingerprint.
 - **Bearer:** admin `admin@solutions.com.vn/Admin@123456` (full) · UAT `nv.test@solutions.com.vn/TestUser@123456` (Drafter CCM, gotcha #44 check).
 - **API Serilog log (S118 correction):** real sink = `C:\inetpub\solution-erp\api\logs\solution-erp-YYYYMMDD.log` (lowercase `logs`, rolling daily). ⚠️ skill-runbook path `…\Logs\log-YYYYMMDD.txt` STALE → empty grep. MinimumLevel Default=Information (DbInitializer `LogInformation` seed/revoke lines DO persist) — Microsoft/System overridden Warning (no "Now listening" INFO). **Startup seed-race audit pattern (durability deploys):** grep this log for revoke-line THEN seeder-line same-second → "N added + M upgraded" proves seeder actively flipped rows revoke knocked down (0-upgraded = seeder no-op = FAIL flag).
 
@@ -77,7 +77,8 @@ BE (test+build) ~90s · FE × 2 ~60s/app · deploy ~30s · **total ~3min code /
 
 ## 📅 Recent runs (compressed — verbatim → archive via `_INDEX.md`)
 
-- **🟢 S128 (2026-07-16) run 509/rn 395 `289ba96` GOVERNANCE+TOOLING GO 5m42s (20:57:02→21:02:44+07):** diff = docs/governance/adap-reports ×5 + broadcasts inbox/outbox ×9 + .claude/{WAL,agents/reviewer,commands/session-start,rag.json,workflows/runs} + `scripts/crystallized-backfill.ps1`. **CI TRIGGERED (NOT docs-skip) — 2 file thoát 7 paths-ignore globs:** `.claude/rag.json` (config trực-tiếp dưới `.claude/`, KHÔNG thuộc `skills|agent-memory|workflows/runs`) + `scripts/crystallized-backfill.ps1` (`.ps1`, glob duy-nhất `scripts/**.md` chỉ cover `.md`). ⚠️ **refines AS-6 #41:** post-#495 memory-push (agent-memory/run-trace/budget.json) HẾT trigger, NHƯNG `.claude/rag.json` + non-.md scripts VẪN trigger — phân-loại phải soi từng file vs 7-glob, đừng giả-định "governance=skip". gate **509 exact** (Domain 45 + Infra 464, 0 fail/skip — web-UI log `runs/395/jobs/0/logs` 17.9KB). smoke ALL 200 (api health/live+ready, admin, eoffice). **Bundle FULL-ROTATE both-apps js+css** (admin `cFI7ih4a`/`CfunQHbd`→`yCkX-2Bp`/`CXD7q9xH`; eoffice `MxgooVZw`/`DGqqHQXS`→`DKSD4p9k`/`CjwZwYJo`) — benign #69 (0 fe-src, uncond FE-rebuild; sites real-200) → **breaks S117-S126 frozen-streak nhưng harmless**. NO-BE/NO-Mig (0 src/Backend, 0 Migrations touched → no drift possible). ⚠️ python `open()` cp1252-default CRASH trên JSON UTF-8 (Vietnamese titles) → poll silent-empty until `encoding='utf-8'` (re-confirm S126 trap); `conclusion` field None dù status=success → trust `status`.
+- **🟢 S129 (2026-07-16) run 510/rn 396 `295c70c` SCRIPTS+GOVERNANCE GO ~3m13s CI (23:19:15→23:22:28+07 / e2e 5m38s từ commit 23:16:50):** diff = 15 file — 2 ops-`.ps1` (`scripts/mfe-eval.ps1` reader+writer EOL/BOM 2-phía · `scripts/agent-frontmatter-eol-check.ps1` +4-comment-header) + 13 `.md` (broadcasts ×6 / run-trace sub-reviewer+synthesis ×3 / agent-memory ×2 / WAL). **CI TRIGGERED (NOT docs-skip): 2 `.ps1` thoát 7 paths-ignore — glob `scripts/**.md` CHỈ cover `.md`, `.ps1` lọt** (khớp S128 `crystallized-backfill.ps1` precedent; AS-6 #41 confirm "non-.md scripts VẪN trigger"). ✅ 2 `.ps1` KHÔNG ở build/deploy path (0 ref trong `.gitea/`) → nếu-fail ≠ do .ps1 (task#5 N/A, PASS). gate **509 EXACT** (Domain 45 + Infra 464, 0 fail/skip — web-UI log `runs/396/jobs/0/logs` 18KB, path SỐNG lại dù S117 dự-đoán 404). smoke ALL 200 (api live+ready, admin, eoffice). **Bundle both-apps FROZEN** (admin `yCkX-2Bp`/`CXD7q9xH` · eoffice `DKSD4p9k`/`CjwZwYJo` — IDENTICAL vs S128, 0 fe-src ⟹ byte-id Vite) NHƯNG **LM fresh-in-window** admin 16:21:00 / eoffice 16:21:55 GMT (+ size 1,656,696/1,563,044 real ≠919b SPA-trap) → #69/#333 frozen-ship PROVEN (breaks S128 rotate, resumes S117-S126 freeze). NO-BE/NO-Mig (0 src/Backend, 0 Migrations → Mig 66 giữ, no drift by-construction). ⚠️ python `open()` phải `encoding='utf-8'` (cp1252 crash JSON Vietnamese); `conclusion`=None dù success → trust `status`.
+- _(**S128 #395 `289ba96` GOVERNANCE+TOOLING GO 5m42s** [gate 509; **CI-trigger dù governance:** `.claude/rag.json` (config trực dưới `.claude/`, ngoài skills|agent-memory|workflows/runs) + `scripts/crystallized-backfill.ps1` (.ps1 thoát `scripts/**.md`) → refines AS-6 #41 "soi TỪNG file vs 7-glob, đừng giả-định governance=skip"; Bundle FULL-ROTATE both-apps từ S117 → admin `yCkX-2Bp`/`CXD7q9xH` eoffice `DKSD4p9k`/`CjwZwYJo`, benign #69 breaks S117-S126 freeze; NO-BE/NO-Mig] · verbatim → `archive/2026-07.md` via `_INDEX`)_
 - _(**S118 #389 `c808b9a` SECURITY-AUTHZ** ReportsController→Reports.Read GO 5m34s [gate 509=45+464 (+4 authz-reflection vs 505); DB `Reports.Read`→Admin-ONLY sqlcmd (Procurement CanRead=0 → non-admin 403 by-construction); no-token 401 class-`[Authorize]` intact; NO-FE/NO-Mig; cicd-lane GARBLED #53 → em-main curl+sqlcmd recovered, verdict disk-TRUE] · **+S117 #387 `316a82f`** PE duyệt-khoảng Min–Max + Mig 66 `AddPeApprovedPriceRange` APPLIED-PROD [gate 501; js-rotate×2 css-frozen; byte-verify #77 4-str PRESENT; Mig66 `COL_LENGTH=9`+sys.tables 89; 🔑 pre-deploy snapshot BEFORE poll-success] · verbatim → `archive/2026-07.md` via `_INDEX`)_
 - _(**S111-S116 #383-#386/#495/#496** PE multi-NCC per-hạng-mục (Mig 65 backfill) + nhập-giá-ÂM + submit-guard + Supplier-import Phase-B/v2 (Mig63 `AddSupplierImportSourceFields`/Mig64 `AddSupplierPublishState` APPLIED-PROD, IsPublic 37/37) + H22-WAL-adopt (deploy.yml self-change +2 paths-ignore) + GOVERNANCE GO [gate 458→495; js-rotate/css-frozen; 🔑 AS-6 baseline-shift memory-push HẾT trigger; 411-refine bodyless-POST→411 → re-probe-with-body 401/415≠404; #69-REFINE 0-src FROZEN-proof; byte-verify #77 str-PRESENT] · verbatim → `archive/2026-07.md` via `_INDEX`)_
 - _(**S98-S110 + S126 #485-#494/#394** GOVERNANCE/MEMORY/TOOLING-push FROZEN-streak sau ROTATE #489 (#69 TWO-MODE; ship-proof = LM-in-window + real-size, hash-delta phụ); gate 440→509; Mig 62 + 89-table frozen · 🔑 #494 LM-newer-than-verified-window = missed-run detector; bare `/health`=404 UNMAPPED (đừng FAIL — thật `/health/live`+`/ready`) · verbatim → `archive/2026-07.md` via `_INDEX`)_

.claude/agent-memory/memory-budget.json

@@ -71,7 +71,7 @@
   "crystallized_backfill": {
     "_note": "Harness-20-era (S103, 2026-07-06) crystallized-backfill = 'measure-then-fill'. Read by scripts/crystallized-backfill.ps1 (deterministic NO-API DRY planner). Adapts AI_INFRA broadcast 2026-07-04 F4 + session-cmd-budget-display Upgrade-1. DISTINCT from CRYSTALLIZATION (engine §I distill = compress-TOWARD-source, keep time-invariant): backfill goes the OPPOSITE direction = FILL the empty hot-feed budget with already-crystallized cold-tier data so the cap is not wasted. PRECONDITION: expected_backfill opens ONLY when target>0 AND measured_headroom>0. Default target=0=OFF. NOT-for-sub (sub packs are lead-curated per-task; blind-pour dilutes relevance).",
     "target": 210000,
-    "_target_note": "OWNER-AUTHORITY static number (mirror token_governor.role_boundary_note + mark RC-...21-06...01-58-01). Default 0 = OFF/disabled. Owner raises >0 ONLY after judging a POSITIVE real-token headroom exists on the stable hot-load floor. The AI (em-main) NEVER sets/auto-tunes this; the script is READ-ONLY on it. S115 (2026-07-13) OWNER-DIRECTED: target 0 -> 210000 (backfill ON). em-main executed per role_boundary_note (owner sets the number, em-main executes+reports, does NOT auto-tune down). HONEST CAVEAT surfaced to owner: measured_headroom ~253.7K tok is over the STABLE FILE-FLOOR only (UPPER BOUND); the real peak ALSO loads session-variable task-context approaching the ~368K read-set, so file-floor ~126K + 210K backfill = ~336K always-on leaves only ~44K for task-context => heavy sessions risk exceeding the 380K cap + higher context-rot (owner previously accepted near-full hot-feed, mark RC-pqhuy1987-29-06-2026-23-25-50 v4). Backfill stays DRY-PLANNER: target>0 makes crystallized-backfill.ps1 PRINT expected_backfill + source-order; it performs NO auto-pour -- actual hot-feed fill is em-main manual per-session from source_order (gist -> value-marked-archive -> curated-RAG, dedup vs hot-load).",
+    "_target_note": "OWNER-AUTHORITY static number (mirror token_governor.role_boundary_note + mark RC-...21-06...01-58-01). Default 0 = OFF/disabled. Owner raises >0 ONLY after judging a POSITIVE upper-bound (heuristic-notice) headroom exists on the stable hot-load floor. The AI (em-main) NEVER sets/auto-tunes this; the script is READ-ONLY on it. S115 (2026-07-13) OWNER-DIRECTED: target 0 -> 210000 (backfill ON). em-main executed per role_boundary_note (owner sets the number, em-main executes+reports, does NOT auto-tune down). HONEST CAVEAT surfaced to owner: measured_headroom ~253.7K tok is over the STABLE FILE-FLOOR only (UPPER BOUND); the real peak ALSO loads session-variable task-context approaching the ~368K read-set, so file-floor ~126K + 210K backfill = ~336K always-on leaves only ~44K for task-context => heavy sessions risk exceeding the 380K cap + higher context-rot (owner previously accepted near-full hot-feed, mark RC-pqhuy1987-29-06-2026-23-25-50 v4). Backfill stays DRY-PLANNER: target>0 makes crystallized-backfill.ps1 PRINT expected_backfill + source-order; it performs NO auto-pour -- actual hot-feed fill is em-main manual per-session from source_order (gist -> value-marked-archive -> curated-RAG, dedup vs hot-load).",
     "hotload_sources": [
       "docs/STATUS.md",
       "docs/HANDOFF.md",

.claude/governance/ACTIVE-MARKS.md

@@ -31,6 +31,7 @@
 > 🔴 **LUẬT retire (căn-cứ THẬT):** *gỡ một nhánh legacy khi **tập di-sản RỖNG**; giữ khi **CÒN người thụ-hưởng**.* **Đo 2 phép ĐỘC-LẬP, khớp (harvest-curator + lead):** dạng-3 → **0 folder** (cả **6 folder** từng dựa — `S112`×4 · `S113` · `S114` — **nay đều có flat** sau retro-harvest `22ea8c5`) ⇒ **gỡ**. dạng-2 → **5 folder S71** ⇒ **GIỮ**. Miễn-trừ C8 (*tha di-sản*) hết hiệu-lực **đúng lúc hết di-sản để tha**, không sớm hơn.
 > ⚠️ **RÚT LẠI một lập-luận của lead (reviewer S123 bác, và bác ĐÚNG):** bản đầu chú-thích này viết *"retire KHÔNG mâu-thuẫn mark mà **HOÀN-THÀNH** nó"* — **đó là NGUỴ-BIỆN**. Điều-khoản (2) dựng **"NHẬN ≠ CHO PHÉP"** thành **nguyên-tắc**, **CỐ Ý tách** lưới-rộng (nhận) ⟂ luật-hẹp (cho phép). Retire **thu lưới bằng luật** ⇒ biến **nhận = cho-phép** ⇒ **NGƯỢC** điều-khoản, không phải hoàn-thành nó. *(Retire vẫn ĐÚNG — nhưng vì lý-do ở trên: hết di-sản. Không được mượn chính điều-khoản để biện-minh cho việc làm ngược nó.)*
 > 🔴 **ĐÂY LÀ QUYẾT-ĐỊNH MỚI, KHÔNG PHẢI DELTA — cần ANH chốt có mark MỚI hay không.** Tiền-lệ phân đôi rõ: **H-15 v2 @S82** (`adap-reports/2026-06-21:37`) lead sửa What-cell, biện-minh *"delta TRONG mark cũ, **không phải quyết-định-governance MỚI**"* · **S122 mark `…20-42-01`** anh chốt chú-thích, thân nguyên = **làm-rõ Ý-ĐỊNH** (roster 12 = ảnh chụp). **S123 thì khác cả hai:** anh **CHỐT RETIRE** = đổi **thực-chất** cái sàn mark mô-tả (TRI→DUAL) ⇒ **đúng ca mà tiền-lệ H-15 loại trừ**. Form chú-thích **hợp-lệ** (P4/P8 không bị vi-phạm — lead **KHÔNG tự đóng dấu**), nhưng **lead KHÔNG được chốt bằng lập-luận "hoàn-thành"** ⇒ **treo cho anh quyết: mark MỚI, hay chú-thích này là đủ?**
+> ✅ **RESOLVED @S130 (2026-07-16, anh confirm qua AskUserQuestion "Gỡ carry"):** câu treo trên đã có lời đáp bằng CHÍNH mark `RC-pqhuy1987-15-07-2026-17-23-10` (thân đầy-đủ + stamped Active-High ở bảng trên; 🔺 chú-thích đầu khối đã trỏ) — tức nhánh "mark MỚI" là nhánh đã xảy-ra, anh chốt S123 *"đồng ý"*. Carry mark-S123 gỡ khỏi sổ theo-dõi; dòng treo giữ nguyên làm audit-trail (near-miss lớp-4 "trạng-thái cũ như chân-lý" — bắt @S129 bằng grep-đĩa, đóng @S130).
 > **Fault-inject RE-VERIFY @S123 sau khi gỡ: 7/7 PASS** — FLAG: orphan-thật · flat 0-byte · C8 0-byte · 🔴 `run.md` có `## Synthesis` mà **không có flat** (ca này **S122 IM → S123 FLAG** = hiệu-lực của retire) · IM: dạng-1 · dạng-2 · folder không `run.md`.
 > 🧊 **2 ca fault-inject S122 nay hết nghĩa** (`dạng-3 → IM` · `"synthesis" giữa câu văn → FLAG`) — cả hai đo nhánh đã gỡ; giữ làm **chứng lịch-sử**, KHÔNG phải test đang chạy. Con số **9/9 của S122 vẫn đúng với bản S122**; **7/7 là của bản S123**.
 > 🔸 **Điều-khoản (2) còn ghi:** *"dạng-4 = **kẽ CÒN LẠI**, khai thẳng chưa xử"* — **VẪN ĐÚNG, KHÔNG đổi**. Nhưng **ví-dụ minh-hoạ (`pe-negative-quote`) đã chết**: `22ea8c5`@14:28 thêm `implement-synthesis.md` 8.249B ⇒ nay là dạng-1, trong khi câu văn viết @`dfa3dae`@14:48 = **SAU 20 phút** ⇒ **stale-at-birth**. Đã đính-chính tại [`tiep.md §0`](../commands/tiep.md); **lập-luận giữ, literal gỡ** (class `acceptance literal tự-lão-hoá`, S121).