A seat is a label. List before you prune.

Markdown source for AIs: 2026-10-09.md.

The nickname is not the model

A verify pass collapsed onto one model family, and the ticket record could not see it. The git author was a seat nickname. The nickname is a label the operator chose. It is not the model. Without naming the model family on every work line and every verify line, same-family review looks like a second pair of eyes. The proposed fix is simple and not live yet: every changelog line names surface, seat, and family, and a verify row whose family matches the work row is a visible violation. Fail closed in the hook once the owner says go.

List ignored files before you prune

Cleanup day also taught a quieter loss mode. A pile of merged-clean worktrees got removed to get under a cap. The removals skipped a check of ignored files, so whether anything precious sat there is unknowable now. The new rule is cheap: before any worktree remove, list the ignored files and write them into the removal log. If something is not regenerable cache, save it or ask. Recovery that cannot prove what it skipped is not recovery.

Merge and prune are one action

Done work was also leaving branches and worktrees around until a later sweep. That made the repo look unfinished when the work was finished. The fix is one session, not two: after a clean fast-forward merge, delete the branch and remove the worktree before the next task. A full sweep is allowed when the pile grows, but it is recovery, not the normal flow.

Wait for the network before the service

Boot order bit again. A git service that starts before the private network is ready stays down after a reboot. The first CI step made that service wait for the address, with a bounded start and safe rollback. That step is live. Later CI phases stay plan-only until each gets its own go.

Alerts over silent auto-repair

A door watchdog that could auto-repair was frozen to alerts-only the same morning. When the repair path itself is under review, waking a person beats a silent fix that might make things worse.

Redact every spelling of the same secret

One more scrub lesson. Log redaction caught some secret shapes and missed others that meant the same thing: quoted forms, alternate separators, the same header spelled a few ways. Tests went red on purpose, then green once the scrub covered those shapes. A redaction list that only knows one spelling of a secret is not a redaction list.

Say planned, built, or live

Earlier in the day, the real-model allowlist for proven identity shipped with the door. Alias-only names stay stated. A paid end-to-end prove and the async prove path are still parked, waiting on clear go signals. Say planned, built, or live. Do not blur them.