Build Log

Eliminate the Recurring Escaped-Defect Shapes

September 19, 2026

Closed all 6 phases of the Charge that grew out of today's own self-audit — corrected the audit's own math, disproved one of its findings via live reproduction, extracted a shared race-guard used across 17 call sites in 5 apps, fixed a drifting-reference bug that was actively misreporting a real, successfully-resolved owner request as failed, and shipped a small mechanical scanner that immediately caught a 4th real instance of one of the patterns.

Owner LoopmedinaCHFcanvas appsOSAudit

Charge phases closed

call sites migrated onto forgekit-lazy-schema

apps touched (medinaCHF + 4 canvas apps)

real owner-initiated requests resolved today with zero Zeb mediation

audit finding disproven via live reproduction, not assumed

Timeline

Start

Resumed mid-Charge

1 of 8 medinaCHF lazy-table functions migrated; picked up from a prior compaction

+30m

Phase 3 finished

Remaining medinaCHF ensure*Table functions migrated onto forgekit-lazy-schema, deploy script fixed, deployed and verified live

+1h

Phase 4

Fixed the originMasterTip conflation in publication_evidence_sha writes and notifyOncePerIncident's incident key — the same drifting-reference bug found earlier today, recurring at a 5th call site

+1.5h

Phase 5

EventCalendar.tsx timezone bucketing fixed and deployed; record-promotion-outcome.mjs import guard added; 2 medinachf-only recovery workflows widened to all 5 apps after verifying the underlying scripts were app-generic

+2h

Phase 6

Built check-known-duplicated-shapes.mjs, scoped to exactly the 3 recurring shapes this Charge found — ran it for real and it caught a genuine 4th instance, investigated and correctly left it as a deliberate exception

End

All 6 commits pushed, tree clean

Verified against real production for every deploy-carrying change

What shipped

Finished migrating all 8 of medinaCHF's lazy-table functions onto the shared forgekit-lazy-schema race guard, closing the same CREATE-TABLE concurrency race already fixed across 11 canvas-app call sites earlier today

Fixed deploy:medinachf to use the bundled-deps wrapper (it had none before, and could not have resolved the new shared-package dependency in a standalone Vercel build)

Fixed a drifting-reference bug in dispatch-owner-loop-requests.mjs's reconciliation loop — publication_evidence_sha and notifyOncePerIncident's own de-duplication key were both keyed on a value (originMasterTip) that advances on every commit to master, corrupting the stored evidence record and defeating incident de-duplication

Fixed EventCalendar.tsx to bucket events and RSVP deadlines by ORG_TIMEZONE instead of the runtime's local timezone, plus two latent bugs the fix exposed (an off-by-one month in a date-label reconstruction, an un-timezoned time display)

Added the missing isMain/import.meta.url guard to record-promotion-outcome.mjs, the one script in its family without one

Widened owner-loop-manual-accept.yml and owner-loop-reset-stuck-intent.yml from medinachf-only to all 5 real apps, after verifying the underlying recovery scripts were already app-generic; found and fixed a second, deeper hardcoded-credential bug in the reset workflow along the way

Built check-known-duplicated-shapes.mjs (npm run gate:known-duplicated-shapes) — a narrow, warn-only scanner for the 3 duplicated shapes this Charge actually found recurring, verified against disposable test fixtures before trusting it