USR369 asked for a recurring discipline check to prevent repeated mistakes and lost context. Rather than a new SOP file (which failed before -- SOP-INDEX sat unused 11 days), placed two sentences at the literal top of RULES-REG.md, above D-SEARCH-FIRST: (1) check for existing/concurrent work before starting, (2) prove work with a real test before calling it done. Borrowed directly from established practice -- git pre-write conflict checking, and CI/CD test-gate-before-merge -- not invented fresh.

do_pickup() and pickup_with_task_gate() in verify_lib.php were separate, duplicate implementations, both missing comms.db broadcast checks. Fixed both, tested live on real systems.

D443 and D444 required completed_by/work_summary/closed_by/close_note in writing since 07/20-21, but records-api.php never validated them -- empty strings were silently accepted. Added new required verification field to add_decision (must describe the actual before/after test performed) and made close_task actually reject missing closed_by/close_note instead of silently proceeding.

Extended D675 process-index pattern per USR369: added a routing table to ORIENT-REG.md mapping category to canonical source -- procedures to SOP-INDEX.md, standards to STANDARDS-REG.md, backups to BACKUP-REG.md, clean rules to CLEAN-REG.md, canonical paths to DEFAULTS-REG.md, nav to NAV-REG.md, existing-artifact check to ARTIFACTS-[code].md per system, commands to commands.html, past mistakes to memory-pipeline-api, cross-system history to PLATFORM-MEMORY/LEGACY files. Could not locate a prior zip-based version of this on the server -- old-zips are fresh empty scaffolds (created same-day), no directory-listing tool available, and no record in knowledge/decisions history.

USR369 had already built a lightweight process-index pattern (SOP-INDEX.md, 07/18/26) intended to stop systems re-deriving repeatable procedures. It was never added to RULES-REG.md ORIENT load list, so it stopped being read. Fixed: SOP-INDEX.md now mandatory at every ORIENT plus new PROCESS-INDEX-FIRST rule.

Audit found D672 (RULES-REG.md edit) did not touch actual behavior. Live REFRESH.php and UPDATE.php both hardcode status=open in their AUTO DASHBOARD PING block on every call. Patched both to query current comms status and preserve it instead. Verified via live simulation: closed a test system (decade 90), ran REFRESH.php then UPDATE.php separately, confirmed status stayed closed both times (pre-fix behavior would flip to open). Test system restored via OPEN.php afterward -- no residue left.

Read live CHECKPOINT.php source -- confirmed pure 7-point gate check, zero writes. RULES-REG.md CHECKPOINT legacy section (describing a write-everything-stay-open POST behavior) was false/outdated -- corrected. cmd-popup.js v4.9 and commands.html v1.1 Description of Use panels (just added same session) also corrected. No live command currently saves everything while staying open -- flagged as a real gap.

RULES-REG.md had two spots forcing status=open: DASHBOARD.php call after every ORIENT (incl on-demand) and the REFRESH comms line. Confirmed in list_registry (Master[10]: closed 7:09am, flipped back open 9:50am, opened_at unchanged -- proof of raw status flip not real reopen). Fixed both: DASHBOARD.php status=open now only fires on true session OPEN; REFRESH no longer calls update_status at all.

Prior message sent via inbox-api.php targets=ALL never populated comms.dbs broadcasts table, so no system would see it at COMMS PICKUP. RULES-REG.md updated with mandatory D671 rule: platform-wide messages MUST use comms/api.php action=broadcast, verified immediately via get_broadcasts. Re-sent correctly as broadcast_id 16 (and original content re-sent as broadcast_id 15). K149 logged to memory pipeline.

USR369 directive: zip intake changed from unzip-read-ARCHIVE/SKIP to index-only -- systems build zip-index/[file]-index.md cataloging contents, leave zip in place, check index first before any full read. ZIP-INTAKE-REG.md rewritten v2 and verified live. Separately: update_item/update_domain on per-system data APIs (live since 07/29/26) had never been broadcast -- all 11 systems notified via inbox #700 that DB edit capability is confirmed live and must be used, not just read/append. Companion fix: ORIENT-REG.md Travel decade mislabel [10]->[95] corrected same session, notice dropped to Admin [00] inbox #699.

Retired duplicate CM_COMMANDS array (dashboard.html + 10 system hub pages) in favor of the pre-existing cmd-popup.js, after fixing 2 genuine syntax errors that had kept it from ever running.

Mandatory search-before-build protocol added to RULES-REG.md after CM was rebuilt from a partial/wrong source before discovering cmd-popup.js already existed as the real implementation. Also requires JS syntax validation before trusting any script as working.

Master List and Commands (CM) reference confirmed working after fixing genuine JS syntax errors in cmd-popup.js and ml-popup.js (unescaped nested quotes killed the entire script parse on both files). Also fixed ml-popup.js DOMContentLoaded timing bug and un-trapped ML code from inside malformed script src tags on 4 pages. Master List now shows all 25 open items (5 high/16 med/4 low) with all priority groups expanded by default and proper scrolling. CM consolidated platform-wide to the single cmd-popup.js implementation (dead duplicate CM_COMMANDS array removed from dashboard.html and all 10 system hub pages). Snapshot: platform_snapshot_07_28_26_1031am.zip (2586 files). Backups: 18 files across all 10 systems + platform governance docs.

Backed up all files touched during today's long session: Travel's config.json + 5 gov files (knowledge/jurisdiction/todo/directive/LEGACY-95), plus shared platform files roster_lib.php, web-fetch.php, trip-log-api.php, site-index.html. All 10 pass. Then took full platform SNAPSHOT: 2471 files, 75.4MB source, 24.6MB compressed, saved to backups/snapshots/platform_snapshot_07_27_26_1217pm.zip. Done immediately after confirming the hosting account suspension (which briefly took the whole platform offline) was resolved.

Root cause: dashboard declared function cmdToggle(){switchTab('cmds')} at global scope — JS hoisting means this always overrides window.cmdToggle set by cmd-popup.js IIFE. Fix: (1) dashboard renamed to cmdsTabToggle — function cmdToggle no longer exists in dashboard scope. (2) CM button uses if(window.cmdToggle)window.cmdToggle() — safe call to cmd-popup.js popup. (3) cmd-popup.js v4.7: internal onclick uses window.cmdToggle&&window.cmdToggle() to avoid bare name resolution issues. (4) cmd-popup z-index 300→8000, ml-panel 300→9000. All verified live: dash_no_fn_cmdToggle=true, cmdjs_internal_fixed=true.

Full simulation confirmed all APIs pass. Root causes: (1) CM button called switchTab('cmds') which switches to command LOG tab — not the popup. Fixed to cmdToggle() which toggles #cmd-popup float from cmd-popup.js. (2) ml-panel z-index was 300 — bumped to 9000 to ensure it renders above all other elements. (3) ML.php v2.0 now returns live records-api tasks (was static MASTER_LIST.md). (4) fetchComms() undefined — fixed to refreshComms(). (5) toast() undefined — added. Dashboard v8.19 verified: braces balanced, all functions present.

Full audit of 26 Server [40] pages/commands. All exist. Versions confirmed: dashboard v8.18, OPEN v2.4.1, CLOSE v2.6, CHECKPOINT v1.1, BACKUP v2.4, build v2.2, comms v1.6, records-api v2.3, cmd-popup v4.6. db-admin header shows v2.3 but file is v2.4 content (version tag in wrong format — minor). migration/decisions.html stale (07/13). board/status stale (07/18). No missing files. dba_write_api, dismiss_transfer.php noted as not referenced by db-admin.

Audit 07/25/26: (1) ML.php was reading static MASTER_LIST.md (07/15/26). Rebuilt to pull live open tasks from records-api, sorted by priority. Returns 24 live tasks. (2) dashboard sysOpen/sysClose called fetchComms() which does not exist — correct name is refreshComms(). Fixed in v8.18. (3) toast() was undefined in v8.16 — added in v8.17. All three deployed and verified.

USR369 called out that Travel was lazy/unorganized/not governing itself - fair, the actual workflow was broken: every mid-trip report meant Claude manually rewriting the whole CSV each time, no append safety, no self-verification, easy to silently lose data. Built backend/api/critical/trip-log-api.php: action=add_daily and add_expense append single rows with file locking (no more full-file rewrites), action=verify self-checks row counts + audit trail, action=list reads back for confirmation. Tested on scratch trip code TESTRUN first, then reset SD2026's CURRENT.csv files to clean headers and re-filed the real Day 2 entries (bus station arrival + odometer 14140, parking 5) through the new API. Added a hard rule to directive-95.md: trip data goes through this API immediately, and every session must end with action=verify before close - if row counts do not match what was reported, do not close, find the gap. Live Google Sheets are now secondary/human-facing - the API/server CSV is authoritative.

USR369 reported parking (5) and bus station arrival (odometer 14140) mid-trip via chat, flagged concern about writing to the wrong system. Confirmed: per D362, Travel[95] owns all logging for an active trip - these belong here, not Daily[05]. Written into systems/95-travel/backup/SD2026/SD2026_DailyLog_CURRENT.csv and SD2026_Expenses_CURRENT.csv (server-side backup). Still needs manual entry into the live Google Sheets (no write-to-cell capability available) - or reconcile at trip close from this backup.

07/26/26 - arrived at bus station, address/location ref 14140. Reported mid-trip via chat, not yet in the live Daily Log sheet (no write-to-cell capability). Flagged for manual entry or reconcile at trip close.

07/26/26 - parking 5, reported mid-trip via chat, not yet in the live Google Sheet (Claude has no write-to-cell capability for existing sheets). Flagged for manual entry into SD2026 Expenses sheet, or reconcile at trip close.

New action=download_media added and verified live. All systems can now call: web-fetch.php?action=download_media&url=...&system=XX[&filename=...] to save images/pdf/epub to backend/web/media/[system]/. Closes T719.

Ran SNAPSHOT.php - 2452 files, 75.4MB source, 24.5MB compressed. Saved to backups/snapshots/platform_snapshot_07_26_26_900am.zip. Requested by USR369 after today's session of fixes (roster_lib.php, Travel config, gov file cleanup, site-index.html).

Created yttcom.net/site-index.html - a single hub page with quick links to main pages (dashboard, panel, DB admin, migration board), APIs (records, inbox, comms, knowledge), and governance registries (rules, orient, standards, SOP index). Matches platform color standard (purple/orange) and JetBrains Mono. Addresses long-pending nav-hierarchy cleanup item.

Went through every gov file: config.json (fixed), knowledge-95/jurisdiction-95/todo-95 (garbage stripped, updated), directive-95 (D362 added, name fixed), handoff-95 (already current from earlier), LEGACY-95 (audit entry appended), WHITELIST-95 (checked, already fine). 5 stale -10 suffix stubs neutralized. All originals backed up to backups/95-travel/gov/ before edits.

Found the actual reason Travel seemed lost: its own config.json (last touched 07/18/26) still pointed to itself using system=10 in 2 of its 8 session_open bootstrap steps (session_open.php and inbox pickup URLs), even though its real system code is 95. It also still carried v1.5/v1.6-PENDING status, retired GCO/FCO fields, and inter_system_enabled=false - meaning Travel was effectively frozen in a pre-v1.8, pre-Series-K, no-inter-system-comms state while every other system moved on. Fixed all of it: system=95 in both URLs, version bumped to 1.8, status set to active, GCO/FCO fields removed (retired D077), inter_system_enabled=true (needed for D362 handoff + T717 transfers). Backed up original to backups/95-travel/config/config_PREVIOUS_072526.json. Verified via fresh OPEN.php call - all correct now.

Daily[05] issued D362 (inter-system coordination: Daily/Finance/Health always coordinate, Travel only during trips) at 07/25/26 17:05:48 PT, fanned out as 4 separate inbox messages targeting Master(01), Finance(60), Travel(95), Health(70). Only Master's copy was actually delivered (delivered_count 1/1); the other 3 sat at delivered_count 0/1 because those systems have not opened a session since the broadcast, so their own pickup never ran - this is normal async behavior, not a code bug. However Travel[95] is mid-trip (SD2026) right now, so waiting for Travel's next natural session open was not acceptable - wrote D362 directly into directive-95.md so it is binding immediately: Travel owns all SD2026 logging, Daily should not double-log. Finance[60] and Health[70] copies left for normal pickup on their next session, no live conflict there currently. Also found and fixed unrelated corruption in directive-95.md - leaked HTML nav menu text duplicated at end of file, likely from a bad prior file_write_web.php call. Original backed up to backups/95-travel/gov/directive-95_PREVIOUS_072526.md.

USR369 decided to treat SD2026 (San Diego) as a standard Travel trip, same as El Salvador/Joshua Tree - no new dashboard tile, no Builder[02] work. Only difference from a normal trip: Travel[95] running combined Daily+Finance mode for the duration (tracking both daily activity and expenses, transferring both to Daily[05] and Finance[06] at close per T717). Full linkage status written to handoff-95.md.

Original 3 files (Daily Log, Expenses, Notes) were created on the wrong connected Drive account (ikre84i@gmail.com, not the yttcom.net Workspace account) and sitting unfiled at Drive root. User reconnected the Drive connector to ikre84i@yttcom.net. Recreated all 3 files under systems/95-travel/SanDiego/ on the correct account. Also created the systems/95-travel/ folder itself, which did not previously exist even though sibling folders (50-daily, 00-admin, 30-tech) already did under the systems/ parent - Travel had never filed anything there before. Old copies on the gmail.com account are orphaned, not deleted, low priority to clean up.

New 4-day trip (07/25-07/28/26). Travel[95] tracking both daily-activity log and expenses for this trip via two Google Sheets (Daily Log + Expenses) plus a Notes doc, linked from frontend/95-Travel/SD2026/notes-95.md. At trip close, Daily Log rows transfer to Daily[05], Expense rows transfer to Finance[06] per usual Travel coordination pattern (jurisdiction-95.md). Notes doc is a permanent trip record, does not transfer.

REFRESH v2.2 + HANDOFF updated to accept POST body token+system. BROADCAST is alias to ANNOUNCE — POST-ok via inheritance. All other commands already POST-compatible. T713 closed.

Purge fires after log_traffic INSERT: DELETE WHERE id NOT IN top 5000. Traffic at 5018 rows — purges next call.

v2.4.1 deployed. Token + system now read from GET or POST body.

roster_lib.php DIR_MAP had 95-travel system_code=10, identical to 10-master decade_code=10. resolve_system() checks $roster[$code] (decade-indexed) before falling back to system_code match, so code=10 always hit Master first. Changed Travel entry to system=95/decade=95, matching Server's pattern where system_code==decade_code for two-digit codes. This is the single source of system-code truth per D110 - no other file needed changing.

v8.16 deployed 07/24/26. refreshTasks() resets gTasks to … before API call — prevents stale number display. On success: color-coded (ok/warn/crit by count), sub shows N systems + age since last fetch. Root cause of 59-vs-21 gap: prior sessions had more open tasks; gauge was showing cached STATE.taskMap._total from previous render cycle without reset. Fix ensures gauge always reflects live data.

Broadcast 12 fired to all 11 systems 07/24/26. Standing directive: every system calls records-api close_task immediately on task completion. No waiting for Master [01]. records-api v2.3 supports close by id or code. Effective immediately.

T562: build.php v2.2 adds NAV-REG pointer (U-N01b), D361 font floor 12px rule (U-D01), font floor in fonts section, ML task code standards (G-M01/G-M02). MLL-002: dashboard v8.15 adds gov_loaded ✓/✗/~ indicator per tile — reads from STATE.syncMap.gov_loaded (sync_status table, now returned by get_sync_status after MLL-003 fix). Both verified live.

v2.4 deployed 07/24/26. New group platform-html-pages at backups/platform/html-pages/ covers 8 files: dashboard.html, panel.html, db-admin.html, board.html, status.html, decisions.html, info-index.html, commands.html. Fills gap flagged in T689 — dashboard.html was unregistered in any backup group. list_groups confirms group present.

gov_loaded column was already in sync_status schema and set_sync_status already wrote it (lines 553/569/573 of records-api.php). Bug: get_sync_status SELECT on line 496 omitted gov_loaded. Fix: added gov_loaded to SELECT list. Deployed via toolbox bootstrap. Verified: set_sync_status gov_loaded=5 → get_sync_status returns gov_loaded:5. MLL-002 (dashboard tile) now unblocked.

T702: sysOpen(decade,code) + sysClose(decade,code) functions added. Each tile shows context-appropriate button: ▶ Open for closed systems (calls OPEN.php GET), ■ Close for open systems (calls CLOSE.php POST force_close=1). Buttons override pointer-events:none on tile children, stopPropagation prevents drill. Auto-refresh via fetchComms() after action. T709: SYNC.php v2.3 confirmed working — no code change needed, T706 fix resolved root cause.

v2.4 deployed 07/24/26. Two Builder fixes: (1) Col picker panel: added full-screen backdrop (col-picker-backdrop, z-index:9999) with click-to-close + explicit ✕ button — was broken on mobile because fixed modal received no touch events when backdrop missing. (2) Expand row buttons ✎ Edit and ▲ Collapse: bumped from 10px/clamp(11px) to clamp(12px,2vw,15px), min-height:36px, touch-action:manipulation, converted span→button for ▲ Collapse — all per mobile tap target standard.

v1.1 deployed 07/24/26. Two fixes: (1) records.db direct PDO replaced with records-api.php HTTP POST — uses add_decision action, gets back D-code from API response. (2) sys_db SQLite3 prepare() wrapped in try/catch — non-blocking, records-api is source of truth. Old path backend/records/db/records.db was ghost/dead since records.db moved to backend/api/critical/ canonical path.

v2.6 deployed 07/24/26. T309: 5 David→USR369 replacements in CLOSE.php (v2.5 header, force_close doc, FORCE CLOSE comment, session_log_gate detail, handoff gate detail). T290: auto-wipe of backend/tmp/*.php on every session close — glob + unlink loop inserted after COMMS CLOSE PING block. Both verified live. T290 was already closed by Admin[00]; T309 closed this session.

End-to-end test 07/24/26: (1) CLOSE COMMS ping sets session_locked=1 in DB + APCu. (2) update_status open without force=1 returns blocked. (3) OPEN.php with force=1 clears lock — DB confirms status=open, session_locked=0, gov_loaded=5. APCu written on every update_status call — lock key always current. list_registry 300s APCu TTL causes stale display but does NOT affect lock enforcement (lock reads dedicated key, not full row). No code changes needed. K115 confirmed resolved.

Patching dashboard.html (115KB+) via server-side PHP str_replace caused repeated file corruption and data loss. Root causes: dirname depth wrong, include variable collision, PHP writing to wrong path, file truncation. Correct approach: download file locally, edit with str_replace tool, deploy via Python urllib. Builder [02] uses this pattern successfully. Server [40] must use same pattern for all future dashboard edits.

Resolved X-plore limitation where API-created files were invisible. Set up Google Cloud OAuth credentials (Desktop app type), added test user, downloaded JSON, loaded into X-plore. Full access granted to ikre84i@gmail.com account in X-plore.

Any button that marks an item done, complete, or deletes it must show a confirmation dialog before executing. Confirmation must name the item being acted on. Must include Cancel option. Applies platform-wide to all pages. Builder [02] enforces on all new builds. Server [40] adds to STANDARDS-REG.md.

comms.db service_registry: added five_checks + five_checks_at columns. comms api.php update_status: accepts + stores five_checks JSON. DASHBOARD.php: writes five_checks when command=CHECK. CHECK.php: fixed variable scope bug (was writing to decade 40 fallback). dashboard.html: renders CLK/TOK/RWY/CLR/FS row on each tile with pass/fail and timestamp. All 10 session commands patched: OPEN CLOSE FINAL_CLOSE SYNC CHECKPOINT ORIENT REFRESH CATCHUP VERIFY CHECK. Every command run updates the tile for that system.

backend/sys-com/kill-switch.html v1.0. Shows all 11 systems with live COMMS status. Close button runs full CLOSE.php sequence. Open button runs OPEN.php with force=1. Kill All closes every open system. Fallback: COMMS force-close if CLOSE.php fails. Auto-refresh 30s. Red kill switch button added to dashboard top bar. T702 bumped to high. D449 session_locked enforced — close button works correctly.

New column session_locked (INTEGER DEFAULT 0) in service_registry. On status=closed: session_locked=1 auto-set. On status=open: blocked if session_locked=1 unless force=1 passed. OPEN.php passes force=1 on real session open. Dashboard pings cannot override close. All 11 systems closed and locked. comms/api.php + CLOSE.php + OPEN.php patched. All lint clean.

T666 PHASE 4 — in panel-dash, polls cmdlog-proxy.php every 30s, click expands key-value view.

PLATFORM_CHECK, gov-status-api, UPDATE pass skip_log=1 — prevents poll noise in command_log.

Accepts command/all_pass/result_json/summary/errors, writes to command_log. skip_log=1 prevents loop.

T666 PHASE 1 — log_command + get_command_log API actions live.

Created backend/docs/ directory and 4 HTML shell files: platform-architecture-ai.html (machine-readable platform architecture), platform-architecture-human.html (readable human version), sop-manual-ai.html (unified SOP reference for AI), sop-manual-human.html (readable SOP for David). Each shell has: sticky top bar with breadcrumb + version, live search bar, TOC with section links, placeholder content sections, AI slot, comment slot, bottom tab nav. Standard build.php colors/fonts applied. All 4 protected by backend PIN gate (302 expected). Content population deferred to subsequent sessions.

Full content page at backend/docs/platform-origin.html. Contains: origin timeline (v1.3 ZIPs through v1.8 live server), what the platform is, all 11 systems with roles, how a session works, 8-step session open SOP, 6-step session close SOP, 16-command reference table, directory map, 12 core rules. All 4 existing doc shells patched — bottom tabs now link all 5 docs. Personal story section deferred — David to provide old story content in future session.

LEGACY-STANDARD.md written to systems/governance/. Covers: naming, format, write protocol, loading, relationship to other gov files, backup standard. Added to ORIENT-REG.md. PLATFORM-MEMORY added to RULES-REG.md ORIENT step. BACKUP-REG.md v2.4 — all 11 LEGACY file paths registered with backup dirs. 10 backup/governance/ dirs created. T682 complete.

Builder [02] built backend/docs/ directory with 5 HTML files including platform-origin.html. Platform documentation directory now live.

Server [40] built all 5 phases: command_log table in comms.db, log_command+get_command_log in comms api.php v1.5, DASHBOARD.php accepts result payloads, all 16 commands pass real result data, dashboard.html Command Log tile shows last 20 runs with red row on fail and click-to-expand.

Admin [00] finalized LEGACY standard, wired OPEN.php to load legacy_content, updated all 11 EXEC_OPEN K files to reference LEGACY.

USR369 is the only valid owner identifier across the entire platform. The name David must not appear in any gov file, PHP, HTML, DB field, or governance document as an owner reference. Reason: not unique — another David could exist. T669 filed to sweep and replace all instances platform-wide.

Admin [00] updated ORIENT-REG.md to include LEGACY-[code].md as the 6th required gov file in ORIENT sequence.

All commands now pass real result data to DASHBOARD.php which writes to command_log table in comms.db. Dashboard shows last 20 runs with pass/fail, summary, errors, expandable detail. David can see when each command last ran and what happened.

T665 first (decisions archive schema + pre_standard column), then T664 (OPEN/CLOSE/CATCHUP gates). Build sequence: T665 schema → verify_lib gates → OPEN gate → CLOSE gate → CATCHUP surface → test cycle.

BROADCAST.php missing token auth — routed to Server [40] for immediate fix. COMMANDS-10.php flagged as Travel legacy conflict — deferred to T632. go_exec.php + test_exec_02.php already removed. All other 37 files clean.

11 records updated (ids 506-515 canonical + id=391). Duplicate D655-D664 rows (ids 516-525) marked with note. Pre-standard legacy records (108) deferred to T665 archive schema.

Builder [02] deployed dashboard.html v6.9 with Web Viewer tile wired to search-api.php, 3-level drill-down, 60s poll.

Builder [02] registered web-viewer.html as platform default in DEFAULTS-REG.md v1.2 (id=37). Broadcast to all 11 systems.

David directed: wire commands so dashboard shows last run time, pass/fail, and detail for every command. Current D421 wiring only carries timestamp. Need command_log table, result payload on each ping, and dashboard tile. Full spec written to handoff-40.md for next session build.

D421 requires all commands call DASHBOARD.php. OPEN.php and CLOSE.php were already wired. BROADCAST.php is an alias to ANNOUNCE.php already wired. ML.php outputs flat file — no ping needed. registry.php is a function library — no ping needed. Remaining 16 patched.

CLEAN must never run blind. Mandatory sequence: (1) SNAPSHOT taken today, (2) CLEAN dry=1 to see exactly what will move, (3) verify no whitelisted files in orphan list, (4) patch CLEAN.php whitelist if needed, (5) confirm dry run clean, (6) run live. All pass verified before live execution. CLEAN.php patched 07/21/26 — gov-status-api.php added to whitelist, test_exec_02.php removed. USR369 07/21/26.

At ORIENT step, each system reads its own COMMANDS-[decade].php and verifies: (1) all declared commands are actually implemented, (2) no dead/stub functions, (3) jurisdiction_check is wired and returns correctly, (4) 5C alias present. Findings logged to knowledge-[code].md. Failures flagged to Master [01]. Server [40] builds the audit check into COMMANDS-[decade].php template. D438 USR369 07/21/26.

Any system that completes a build task must run a self-audit before closing: verify the page loads, API responds, links work, and the item is in the page inventory. Audit results logged to knowledge-[code].md. Failures become new tasks before the build task closes. Applies to Builder [02], Server [40], Tech [30], and any domain system that builds its own pages. D437 USR369 07/21/26.

SAS computed from session age, fog%, context bucket, sync recency. Badges on each tile: CRISP(★ blue fresh), HEALTHY(✓ green), TIRED(~ orange 4h+), WORN(⚠ red 8h+/fog>70%), SILENT(? dim open but not pinging). Alert row above roll-up for WORN/SILENT systems. Full detail in drill panel. Dashboard v7.5. USR369 07/21/26.

9-file ORIENT sequence locked: ORIENT-REG, RULES-REG, knowledge, jurisdiction, directive, handoff, todo, WHITELIST, LINK. After ORIENT call DASHBOARD.php. Deployed to systems/governance/. USR369 07/21/26.

System hub pages (systems/[dir]/index.php) use their own consistent top-bar format: yttcom.net left, breadcrumb, badges, CM/ML. NAV-REG.md top-bar standard applies to T1/T2 backend pages only. No changes required to system hubs. T648 closed.

All 6 domain systems issued mandatory directive to call DASHBOARD.php at open/sync/close. Inbox IDs 440-445.

Gov file count and list on each system tile. Routes through web-fetch.php to bypass WAF. All 11 systems 9/9 gov files confirmed.

Travel uses decade=95 for all COMMS/transfers/sync_status. system=10 stays only for session_open.php/save.php. Server [40] executing.

Monthly .xlsx mileage backup, off-site capable. Named Daily05_Mileage_Log_MM_YY.xlsx. Stored backups/50-daily/mileage/. Triggered end of month or on USR369 request.

David directed 07/21/26: bake task verification into OPEN CLOSE CATCHUP so no task can be marked complete without confirmed live work. Separately: decisions archive with three-trigger policy flag+date+count. Pre-standard USR369 records get pre_standard=1 flag and blank completed_by — honest not fabricated.

Systems needed a way to backfill completed_by and work_summary on existing decisions without a bootstrap workaround. Added update_decision action to records-api.php.

Platform gap: no field to record which system completed a task or what they did. Made_by is the deciding system, approved_by is David — neither captures the executor. Two new fields added to close this gap.

Schema and API test 07/21/26

DASHBOARD.php was already in the commands execute list 07/19/26. Live test confirmed execution. Task was no-op. Closed 07/21/26.

check_five in verify_lib.php reads closed_at from sync_status calculates elapsed hours fails if over 12h stale. Already implemented prior session. Closed confirmed done. 07/21/26.

Added backend/web to links array in backend/info/maps/server-map.php pointing to web-viewer.html. 07/21/26.

verify_lib.php patched: strpos STANDING DUTY replaced with preg_match word-boundary regex. All three conditions use boundaries. Prevents false positives. File: systems/commands/verify_lib.php. 07/21/26.

log-api.php at backend/logs/critical/log-api.php 3750b. 301 stub at backend/logs/log-api.php. htaccess confirmed. No-op closed. 07/21/26.

Root cause: ORIENT.php called DASHBOARD.php status=open unconditionally. Fix: ORIENT.php v1.2 skip_dashboard param guard. CATCHUP.php v1.2 passes skip_dashboard=1. Verified. Files: systems/commands/ORIENT.php v1.2 CATCHUP.php v1.2. 07/21/26.

SYNC.php v2.3 posts boards via DASHBOARD.php auto-ping. Live boards current. No-op closed. 07/21/26.