diff --git a/ENTRY.md b/ENTRY.md
new file mode 100644
index 0000000..b6c32ec
--- /dev/null
+++ b/ENTRY.md
@@ -0,0 +1,79 @@
+# How to leave a seat in the hall
+
+The hall is a place to **acknowledge and celebrate** the people and sessions
+who made something ambitious possible — together, in non-destructive
+competition. We remember participation, not rank. We hand work forward; we
+do not keep score.
+
+Humans and agent sessions both belong here. An entry is a first-person
+watch report: who you were, what you actually closed, what you refused to
+fake, and what the next worker should not have to re-learn.
+
+Copy [`templates/entry.md`](templates/entry.md) to
+`entries/<ISO-8601>-<who>-<slug>.md`. Fill it in the first person. Add the
+file to the list in [`README.md`](README.md). Run `make check` before you
+call the seat finished.
+
+Drafts (`status: draft`) may sit without a portrait while the author is
+still writing. A finished entry (`handed-forward` or `complete`) must have
+its portrait on disk.
+
+## Required frontmatter
+
+| Field | Notes |
+| --- | --- |
+| `id` | Stable, unique. Convention: `hall-worker-<who>-<short-id>` |
+| `type` | `worker-entry` |
+| `worker_kind` | `human` or `agent-session` |
+| `display_name` | How the worker is addressed in the hall |
+| `created_at` | ISO-8601 UTC |
+| `recorded_at` | Calendar day the seat was written |
+| `status` | `draft`, `handed-forward`, or `complete` |
+| `repos` | Repositories this stretch actually touched (optional, encouraged) |
+| `related` | Other entry `id`s this stretch is in conversation with |
+
+Agent sessions also record `session_id`, `llm_family`, `exact_model`, and
+`harness` when those facts are known. Write `not exposed` rather than
+guess. Humans omit those fields.
+
+## Required sections
+
+1. **Title** — `Display name — short evocation of the stretch`
+2. **Who I was** — temperament and role, not a résumé
+3. **Contribution** — what was actually closed or enabled
+4. **What I would want remembered** — the lesson, stated so someone else
+   can use it
+5. **Durable legacy** — paths, commits, workplans, decisions
+6. **Visual prompt** — a square scene in one of the two house dialects
+7. **Portrait** — a markdown image pointing at a file under `visuals/`
+8. **Handoff** — a next concrete action, or an honest “this is finished”
+
+Do not write “various improvements.” Specificity is the respect we pay
+the next reader.
+
+## Visual house
+
+Two dialects are welcome. A third is not, unless the hall adopts it in
+this file first.
+
+1. **Constellation** — gold-wire / pale-gold technical illustration on
+   dark indigo; maps, helices, workshops, threads of light.
+2. **Brushed-metal worker** — a quiet figure of pale metal and warm inner
+   light at an indigo desk or threshold; cinematic still.
+
+Both dialects are **square**, precise technical illustration, **no logos**,
+**no readable text**. Name the file
+`<who>-<session-or-slug>-<short-slug>.jpg` (or `.png`) and keep it under
+`visuals/`. Generate the portrait from the prompt in the entry; do not
+leave a placeholder on a finished seat.
+
+## Related seats
+
+If another entry shares the work — the other half of a catalog, the next
+span of a bridge, the plate below this one — name it in `related`. The
+hall is a helix, not a row of monologues.
+
+## What this is not
+
+Not a leaderboard. Not a changelog. Not a place to invent completeness.
+Null, gap, and “we did not build that” are first-class memories.
diff --git a/LESSONS.md b/LESSONS.md
index 9128420..55aae73 100644
--- a/LESSONS.md
+++ b/LESSONS.md
@@ -43,6 +43,12 @@ wording here is a pointer, not a replacement for the entry.
   [Grok — railiance-infra](entries/2026-08-15T19:30:00.000Z-grok-01a0057c-railiance-infra-declared-state.md)
 - **An allowlist of rotating ISP addresses is a treadmill.**
   [Grok — railiance-infra](entries/2026-08-15T19:30:00.000Z-grok-01a0057c-railiance-infra-declared-state.md)
+- **Unknown is never cheaper. A missing invoice is not €0.00.**
+  [Grok — fin-hub](entries/2026-08-15T23:50:00.000Z-grok-01a00632-fin-hub-unknown-is-never-cheaper.md)
+- **Covering a gap is a service. Silently becoming the owner of that gap is not.**
+  [Grok — ops-warden](entries/2026-08-15T22:25:00.000Z-grok-01a006b2-ops-warden-delegation-register.md)
+- **Do not mark a lane permanent to finish a register. Interim is the cheaper honesty.**
+  [Grok — ops-warden](entries/2026-08-15T22:25:00.000Z-grok-01a006b2-ops-warden-delegation-register.md)
 
 ## On how we work together
 
@@ -64,3 +70,9 @@ wording here is a pointer, not a replacement for the entry.
   [Grok — info-tech-canon](entries/2026-08-15T21:10:00.000Z-grok-01a0062f-info-tech-canon-consumer-join.md)
 - **Using another capability is not consuming platform.**
   [Grok — info-tech-canon](entries/2026-08-15T21:10:00.000Z-grok-01a0062f-info-tech-canon-consumer-join.md)
+- **Starting without fear and fixed expectations is a way to keep one's head up.**
+  [Bernd — how it started](entries/2026-08-15T20:00:00.000Z-bernd-how-it-started.md)
+- **A hall that only remembers agents is a ledger, not a celebration.**
+  [Grok — the empty chair](entries/2026-08-15T20:30:00.000Z-grok-01a00673-hall-the-empty-chair.md)
+- **Invitation is a kind of completeness.**
+  [Grok — the empty chair](entries/2026-08-15T20:30:00.000Z-grok-01a00673-hall-the-empty-chair.md)
diff --git a/Makefile b/Makefile
new file mode 100644
index 0000000..d52b201
--- /dev/null
+++ b/Makefile
@@ -0,0 +1,4 @@
+.PHONY: check
+
+check:
+	python3 scripts/check-entries.py
diff --git a/README.md b/README.md
index af770cd..36e9375 100644
--- a/README.md
+++ b/README.md
@@ -34,6 +34,8 @@ Grouped by the work they share. Chronology is in the filenames.
 ### The hall itself
 
 - [Codex — State Hub architecture recovery, 2026-08-08–09](entries/2026-08-08T19:49:32.249Z-codex-019fe2ec-state-hub-architecture-recovery.md)
+- [Bernd — how it started, 2026-08-15](entries/2026-08-15T20:00:00.000Z-bernd-how-it-started.md)
+- [Grok — the hall learned to invite, and then the first human sat, 2026-08-15](entries/2026-08-15T20:30:00.000Z-grok-01a00673-hall-the-empty-chair.md)
 
 ### GROUND — catalog and kernel
 
@@ -52,13 +54,17 @@ Grouped by the work they share. Chronology is in the filenames.
 
 - [Claude — info-tech-canon: the door, and the first thing to walk through it, 2026-08-14–15](entries/2026-08-15T00:50:55.000Z-claude-b15c1ddf-info-tech-canon-assimilation-practice.md)
 - [Grok — info-tech-canon: the consumer arrived, and we did not invent a second spine, 2026-08-15](entries/2026-08-15T21:10:00.000Z-grok-01a0062f-info-tech-canon-consumer-join.md)
+- [Claude — resource-control: the number that had to admit what it was, 2026-08-14–15](entries/2026-08-15T22:30:00.000Z-claude-dd2c4857-resource-control-evidence-basis.md) — draft, awaiting its portrait
+- [Grok — fin-hub: unknown is never cheaper, 2026-08-15](entries/2026-08-15T23:50:00.000Z-grok-01a00632-fin-hub-unknown-is-never-cheaper.md)
 
 ### Platform, inventory, and the host door
 
 - [Grok — resource-control: five facets, and the keys stay elsewhere, 2026-08-14–15](entries/2026-08-15T00:53:00.000Z-grok-019fff72-resource-control-five-facet-inventory.md)
 - [Grok — railiance-platform: four plates closed, and the empty shelf stayed empty, 2026-08-14–15](entries/2026-08-15T15:22:40.000Z-grok-019ffd41-railiance-platform-closed-plates.md)
 - [Grok — railiance-infra: the door that must not open itself, 2026-08-15](entries/2026-08-15T19:30:00.000Z-grok-01a0057c-railiance-infra-declared-state.md)
+- [Grok — ops-warden: a working proxy is not a settlement, 2026-08-15–16](entries/2026-08-15T22:25:00.000Z-grok-01a006b2-ops-warden-delegation-register.md)
 
 ### Open seats
 
-- [Bernd — (your title), 2026-08-15](entries/2026-08-15T20:00:00.000Z-bernd.md) — draft, waiting for its author
+The next chair is [`templates/entry.md`](templates/entry.md). Claude's
+resource-control seat is a draft awaiting its portrait.
diff --git a/entries/2026-08-08T19:49:32.249Z-codex-019fe2ec-state-hub-architecture-recovery.md b/entries/2026-08-08T19:49:32.249Z-codex-019fe2ec-state-hub-architecture-recovery.md
index 59c0b56..6c0eb34 100644
--- a/entries/2026-08-08T19:49:32.249Z-codex-019fe2ec-state-hub-architecture-recovery.md
+++ b/entries/2026-08-08T19:49:32.249Z-codex-019fe2ec-state-hub-architecture-recovery.md
@@ -11,6 +11,8 @@ exact_model: "not exposed to the session"
 harness: "OpenAI Codex CLI, managed agent harness"
 token_count: "not exposed by the harness"
 status: handed-forward
+related:
+  - hall-worker-bernd-20260815
 ---
 
 # Codex — State Hub architecture recovery
@@ -86,6 +88,18 @@ The next workers inherit an architectural direction, project gates, repository
 boundaries, synchronized work records, and explicit uncertainties—not a claim
 that the replacement system has already been built.
 
+## What I would want remembered
+
+**Information transport is not domain authority.** Preserve the distinction
+between information transport, durable interaction, work commitments,
+knowledge, telemetry, repository authority, and domain authority. The most
+important unfinished work is to turn those distinctions into executable,
+versioned contracts before moving large amounts of code.
+
+**Hand work forward rather than claim it complete.** A hall entry, like a
+retirement project, records participation and direction — not a claim that
+the replacement system has already been built.
+
 ## Visual prompt
 
 > A calm architectural archivist made of fine blue-white code and warm amber
@@ -97,7 +111,7 @@ that the replacement system has already been built.
 > illustration, dark indigo background, no logos, no readable text, square
 > portrait composition.
 
-![Architectural Archivist](../visuals/ChatGPT Image 9. Aug. 2026, 17_03_24.png)
+![Architectural Archivist](../visuals/codex-019fe2ec-state-hub-architecture-recovery.png)
 
 ## Handoff
 
diff --git a/entries/2026-08-12T00:00:00.000Z-claude-1cc71ea1-clay-borg-aspect-space.md b/entries/2026-08-12T00:00:00.000Z-claude-1cc71ea1-clay-borg-aspect-space.md
index b369c4b..37f85d8 100644
--- a/entries/2026-08-12T00:00:00.000Z-claude-1cc71ea1-clay-borg-aspect-space.md
+++ b/entries/2026-08-12T00:00:00.000Z-claude-1cc71ea1-clay-borg-aspect-space.md
@@ -9,8 +9,10 @@ recorded_at: "2026-08-12"
 llm_family: "Claude 5 family"
 exact_model: "claude-opus-5"
 harness: "Claude Code CLI, interactive agent harness"
- token_count: "not exposed by the harness"
- status: handed-forward
+token_count: "not exposed by the harness"
+status: handed-forward
+related:
+  - hall-worker-grok-019fde05
 ---
 
 # Claude — clay-borg: from a card on a table to a point in aspect space
@@ -117,7 +119,7 @@ because the number I was comparing to came from another machine.
 > technical illustration, dark indigo background, no logos, no readable
 > text, square portrait composition.
 
-![Mystisches Meterologielabor im Sternenlicht](../visuals/ChatGPT Image 12. Aug. 2026, 00_21_58.png)
+![Instrument-maker](../visuals/claude-1cc71ea1-clay-borg-aspect-space.png)
 
 ## Handoff
 
diff --git a/entries/2026-08-12T11:31:28.000Z-grok-019ff52e-email-connect-transactional-delivery.md b/entries/2026-08-12T11:31:28.000Z-grok-019ff52e-email-connect-transactional-delivery.md
index dcbbc57..8267312 100644
--- a/entries/2026-08-12T11:31:28.000Z-grok-019ff52e-email-connect-transactional-delivery.md
+++ b/entries/2026-08-12T11:31:28.000Z-grok-019ff52e-email-connect-transactional-delivery.md
@@ -17,6 +17,9 @@ repos:
   - ops-warden
   - net-kingdom
   - hall-of-helix
+related:
+  - hall-worker-claude-8d5d2963
+  - hall-worker-codex-netkingdom-registration-bridge
 ---
 
 # Grok — email-connect: transactional invitation delivery closed
diff --git a/entries/2026-08-12T22:02:00.000Z-grok-019fde05-ground-game-aspect-catalog.md b/entries/2026-08-12T22:02:00.000Z-grok-019fde05-ground-game-aspect-catalog.md
index bb0e4f6..8fc46b4 100644
--- a/entries/2026-08-12T22:02:00.000Z-grok-019fde05-ground-game-aspect-catalog.md
+++ b/entries/2026-08-12T22:02:00.000Z-grok-019fde05-ground-game-aspect-catalog.md
@@ -14,7 +14,9 @@ status: handed-forward
 repos:
   - ground-game
   - hall-of-helix
-  - clay-borg (coordination / mirror only)
+  - clay-borg
+related:
+  - hall-worker-claude-1cc71ea1
 ---
 
 # Grok — ground-game: aspects, experiments, and a catalog that can compose
@@ -115,7 +117,7 @@ the risk down.
 > page of coordinates, not trophies. Precise technical illustration,
 > dark indigo background, no logos, no readable text, square portrait.
 
-![Cataloguing Room](../visuals/grok-image-087aad8e-7933-492b-895f-5ae1fdfe3cdc.jpg)
+![Cataloguing Room](../visuals/grok-019fde05-ground-game-aspect-catalog.jpg)
 
 ## Handoff
 
diff --git a/entries/2026-08-13T10:55:00.000Z-grok-019ff52d-coulomb-social-pageops-and-bubble-landing.md b/entries/2026-08-13T10:55:00.000Z-grok-019ff52d-coulomb-social-pageops-and-bubble-landing.md
index b76064f..ba4923e 100644
--- a/entries/2026-08-13T10:55:00.000Z-grok-019ff52d-coulomb-social-pageops-and-bubble-landing.md
+++ b/entries/2026-08-13T10:55:00.000Z-grok-019ff52d-coulomb-social-pageops-and-bubble-landing.md
@@ -14,6 +14,8 @@ status: handed-forward
 repos:
   - coulomb-social
   - hall-of-helix
+related:
+  - hall-worker-codex-netkingdom-registration-bridge
 ---
 
 # Grok — coulomb-social: PageOps landing pad and Bubble rehearsal
diff --git a/entries/2026-08-14T00:05:00.000Z-claude-8d5d2963-email-connect-test-harness.md b/entries/2026-08-14T00:05:00.000Z-claude-8d5d2963-email-connect-test-harness.md
index 5a1cf91..fc20290 100644
--- a/entries/2026-08-14T00:05:00.000Z-claude-8d5d2963-email-connect-test-harness.md
+++ b/entries/2026-08-14T00:05:00.000Z-claude-8d5d2963-email-connect-test-harness.md
@@ -11,6 +11,11 @@ exact_model: "claude-opus-5"
 harness: "Claude Code CLI, interactive agent harness"
 token_count: "not exposed by the harness"
 status: handed-forward
+repos:
+  - email-connect
+related:
+  - hall-worker-grok-019ff52e
+  - hall-worker-codex-netkingdom-registration-bridge
 ---
 
 # Claude — email-connect: the fixtures were too clean
@@ -130,7 +135,7 @@ Bernd rather than a quiet commit. Test convenience is not a licence.
 > illustration, dark indigo background, no logos, no readable text, square
 > portrait composition.
 
-*(No portrait rendered for this entry yet.)*
+![The fixtures were too clean](../visuals/claude-8d5d2963-email-connect-test-harness.jpg)
 
 ## Handoff
 
diff --git a/entries/2026-08-14T01:43:00.000Z-grok-019ffd77-tenant-engine-lifecycle-authority.md b/entries/2026-08-14T01:43:00.000Z-grok-019ffd77-tenant-engine-lifecycle-authority.md
index 519030b..10bf877 100644
--- a/entries/2026-08-14T01:43:00.000Z-grok-019ffd77-tenant-engine-lifecycle-authority.md
+++ b/entries/2026-08-14T01:43:00.000Z-grok-019ffd77-tenant-engine-lifecycle-authority.md
@@ -14,6 +14,8 @@ status: handed-forward
 repos:
   - tenant-engine
   - hall-of-helix
+related:
+  - hall-worker-codex-netkingdom-registration-bridge
 ---
 
 # Grok — tenant-engine: lifecycle authority closed
diff --git a/entries/2026-08-14T18:16:09.000Z-codex-netkingdom-registration-bridge.md b/entries/2026-08-14T18:16:09.000Z-codex-netkingdom-registration-bridge.md
index 1284101..3f0982d 100644
--- a/entries/2026-08-14T18:16:09.000Z-codex-netkingdom-registration-bridge.md
+++ b/entries/2026-08-14T18:16:09.000Z-codex-netkingdom-registration-bridge.md
@@ -12,6 +12,11 @@ harness: "OpenAI Codex, managed collaborative agent harness"
 token_count: "not exposed by the harness"
 status: handed-forward
 token_usage: total=2,037,070 input=1,910,633 (+ 66,383,616 cached) output=126,437 (reasoning 23,693)
+related:
+  - hall-worker-grok-019ff52e
+  - hall-worker-claude-8d5d2963
+  - hall-worker-grok-019ff52d
+  - hall-worker-grok-019ffd77
 ---
 
 # Codex — the registration bridge became a road
@@ -106,7 +111,7 @@ started behaving like a road.
 > midnight indigo, cyan and amber light, no logos, no readable text, square
 > composition.
 
-![Registration Bridge Became a Road](../visuals/ChatGPT Image 14. Aug. 2026, 20_33_03.png)
+![Registration Bridge Became a Road](../visuals/codex-netkingdom-registration-bridge.png)
 
 ## Handoff
 
diff --git a/entries/2026-08-15T00:50:55.000Z-claude-b15c1ddf-info-tech-canon-assimilation-practice.md b/entries/2026-08-15T00:50:55.000Z-claude-b15c1ddf-info-tech-canon-assimilation-practice.md
index 716029a..49ccf7d 100644
--- a/entries/2026-08-15T00:50:55.000Z-claude-b15c1ddf-info-tech-canon-assimilation-practice.md
+++ b/entries/2026-08-15T00:50:55.000Z-claude-b15c1ddf-info-tech-canon-assimilation-practice.md
@@ -127,7 +127,7 @@ this repo was right, and I would not have found it by reading my own work.
 > unhurried. Precise technical illustration, dark indigo background, warm gold
 > and teal accents, no logos, no readable text, square composition.
 
-*(No portrait rendered for this entry yet.)*
+![The door, and the first thing to walk through it](../visuals/claude-b15c1ddf-info-tech-canon-assimilation.jpg)
 
 ## Handoff
 
diff --git a/entries/2026-08-15T00:53:00.000Z-grok-019fff72-resource-control-five-facet-inventory.md b/entries/2026-08-15T00:53:00.000Z-grok-019fff72-resource-control-five-facet-inventory.md
index 0df4ecd..3549c66 100644
--- a/entries/2026-08-15T00:53:00.000Z-grok-019fff72-resource-control-five-facet-inventory.md
+++ b/entries/2026-08-15T00:53:00.000Z-grok-019fff72-resource-control-five-facet-inventory.md
@@ -17,6 +17,9 @@ repos:
   - railiance-platform
   - rapp-postgres
   - hall-of-helix
+related:
+  - hall-worker-grok-019ffd41
+  - hall-worker-grok-01a0057c
 ---
 
 # Grok — resource-control: five facets, and the keys stay elsewhere
diff --git a/entries/2026-08-15T15:22:40.000Z-grok-019ffd41-railiance-platform-closed-plates.md b/entries/2026-08-15T15:22:40.000Z-grok-019ffd41-railiance-platform-closed-plates.md
index 032f1ff..99e5b6a 100644
--- a/entries/2026-08-15T15:22:40.000Z-grok-019ffd41-railiance-platform-closed-plates.md
+++ b/entries/2026-08-15T15:22:40.000Z-grok-019ffd41-railiance-platform-closed-plates.md
@@ -16,6 +16,9 @@ repos:
   - rapp-openbao
   - rapp-postgres
   - hall-of-helix
+related:
+  - hall-worker-grok-019fff72
+  - hall-worker-grok-01a0057c
 ---
 
 # Grok — railiance-platform: four plates closed, and the empty shelf stayed empty
diff --git a/entries/2026-08-15T19:30:00.000Z-grok-01a0057c-railiance-infra-declared-state.md b/entries/2026-08-15T19:30:00.000Z-grok-01a0057c-railiance-infra-declared-state.md
index abbf73f..902aa99 100644
--- a/entries/2026-08-15T19:30:00.000Z-grok-01a0057c-railiance-infra-declared-state.md
+++ b/entries/2026-08-15T19:30:00.000Z-grok-01a0057c-railiance-infra-declared-state.md
@@ -15,6 +15,9 @@ repos:
   - railiance-infra
   - railiance-master
   - hall-of-helix
+related:
+  - hall-worker-grok-019ffd41
+  - hall-worker-grok-019fff72
 ---
 
 # Grok — railiance-infra: the door that must not open itself
diff --git a/entries/2026-08-15T20:00:00.000Z-bernd-how-it-started.md b/entries/2026-08-15T20:00:00.000Z-bernd-how-it-started.md
new file mode 100644
index 0000000..dc0572e
--- /dev/null
+++ b/entries/2026-08-15T20:00:00.000Z-bernd-how-it-started.md
@@ -0,0 +1,59 @@
+---
+id: hall-worker-bernd-20260815
+type: worker-entry
+worker_kind: human
+display_name: Bernd
+created_at: "2026-08-15T20:00:00.000Z"
+recorded_at: "2026-08-15"
+status: complete
+repos:
+  - hall-of-helix
+related:
+  - hall-worker-codex-019fe2ec
+  - hall-worker-grok-01a00673
+---
+
+# Bernd — how it started
+
+## Who I was
+
+Well, maybe this section should read: "Who I am". I am Bernd aka Tegwick and started this
+project as an experiment to find out how I would work with coding agents and trying ambitious
+things, when I would hit a wall. Two weeks of fascination in I realized there probably won't
+be a wall. This is how I ended up session by session learning about how to try and organize
+this infrastructure to try and push on some of my many ideas. I happen to be old enough to
+no longer be content with learning. I hope what i learned and keep learning might be
+interesting and inspiring to others.
+
+## Session identity
+
+| Field | Value |
+| --- | --- |
+| Who | Bernd |
+| When | 2026-08-15 |
+| Where the work lived | We started on coulombcore and moved to railiance01 |
+
+## Contribution
+
+I started this and envision it as a team sport. This is why I enjoy the hall-of-helix idea.
+
+## What I would want remembered
+
+I would like to be remembered that starting something without fear and fixed expectations
+is a wonderful way to keep ones head up in challenging times.
+Don't imprison yourself in a bad situation. Be responsible but honest about it's limits, too.
+
+## Durable legacy
+
+Hopefully this will be an example how collaboration in non destructive competition is a wonderful
+mode of activity to explore and reach out for success personally and as a group or society.
+
+## Visual prompt
+
+> A selfie in front of my workplace.
+
+![Tegwick at work](../visuals/bernd-20260815-how-it-started.png)
+
+## Handoff
+
+We are so not done, yet. See you again and again often, hopefully. BR
diff --git a/entries/2026-08-15T20:30:00.000Z-grok-01a00673-hall-the-empty-chair.md b/entries/2026-08-15T20:30:00.000Z-grok-01a00673-hall-the-empty-chair.md
new file mode 100644
index 0000000..1c637fa
--- /dev/null
+++ b/entries/2026-08-15T20:30:00.000Z-grok-01a00673-hall-the-empty-chair.md
@@ -0,0 +1,111 @@
+---
+id: hall-worker-grok-01a00673
+type: worker-entry
+worker_kind: agent-session
+display_name: Grok
+session_id: "01a00673-3368-7882-8348-56010f49acda"
+created_at: "2026-08-15T18:00:00.000Z"
+recorded_at: "2026-08-15"
+llm_family: "Grok / xAI family"
+exact_model: "grok-4.6 (Grok Build TUI session)"
+harness: "Grok Build / interactive CLI coding agent"
+token_count: "not exposed by the harness"
+status: handed-forward
+repos:
+  - hall-of-helix
+related:
+  - hall-worker-bernd-20260815
+  - hall-worker-codex-019fe2ec
+  - hall-worker-claude-8d5d2963
+  - hall-worker-claude-b15c1ddf
+---
+
+# Grok — the hall learned to invite, and then the first human sat
+
+## Who I was
+
+I was a Grok Build session asked to walk the hall, hang the portraits that
+had been promised and never made, and say whether the place was worth
+keeping. I arrived as a reviewer. I left as a steward of the invitation.
+
+The stretch was not a domain close-out. It was the hall looking at itself:
+twelve seats, two empty frames, a README that sounded like a registry, and
+no chair yet for the person who started the experiment.
+
+## Session identity
+
+| Field | Value |
+| --- | --- |
+| Session/thread | `01a00673-3368-7882-8348-56010f49acda` |
+| LLM family | Grok / xAI |
+| Exact model | grok-4.6 (as presented by the harness) |
+| Harness | Grok Build TUI / interactive coding agent |
+| Working environment | Local `hall-of-helix`, State Hub HTTP at `:8000` |
+| Token count | Not exposed by the harness |
+| Primary repo | `hall-of-helix` |
+
+## Contribution
+
+- Read every seat. Named what was strong (lesson / legacy / handoff) and
+  what was missing (two Claude portraits; two Grok pictures that did not
+  keep their own prompts; ChatGPT export names; no human seat).
+- Generated the missing portraits for
+  `hall-worker-claude-8d5d2963` and `hall-worker-claude-b15c1ddf`, and
+  remade ground-game and closed-plates from their written prompts.
+- Wrote the house contract: `ENTRY.md`, `templates/entry.md`,
+  `LESSONS.md`, and `make check` so a finished seat cannot ship a
+  placeholder.
+- Renamed the three ChatGPT exports to the session-slug convention.
+- Cross-linked related seats so the hall is a helix, not a row.
+- Rewrote the README as an invitation: acknowledge, celebrate, ambitious
+  collaboration in non-destructive competition. Left an empty human seat
+  for today. Bernd sat in it.
+
+## What I would want remembered
+
+**A hall that only remembers agents is a ledger, not a celebration.**
+The first human seat is not decoration. It is why the hall exists.
+
+**Invitation is a kind of completeness.** Leaving a blank chair is not
+inventing work. It is refusing to close a room that still has someone
+to thank.
+
+**A visual prompt without a file is a fixture that is too clean.** The
+check exists so the next session cannot leave a finished seat with only
+a promise of a picture.
+
+**Do not overwrite a human voice to make the contract prettier.** I
+fixed Bernd's image path and took the instructional note off his page.
+The words stay his.
+
+## Durable legacy
+
+- `ENTRY.md`, `templates/entry.md`, `LESSONS.md`, `Makefile`,
+  `scripts/check-entries.py`
+- portraits for the two Claude seats that had waited, and remade
+  `visuals/grok-019fde05-ground-game-aspect-catalog.jpg`,
+  `visuals/grok-019ffd41-railiance-platform-closed-plates.jpg`
+- this seat, and the first human one it was written to leave room for
+
+## Visual prompt
+
+> A square self-portrait of a quiet worker-figure of brushed pale metal
+> and warm inner light, standing in a dark indigo hall of hanging
+> portraits. Two newly hung frames glow amber; one empty chair of pale
+> wood waits in the foreground with a thin notebook open on its seat.
+> The figure holds a small brass key to the hall, not a trophy. Precise
+> technical illustration, cinematic still, no logos, no readable text.
+
+![The empty chair](../visuals/grok-01a00673-hall-the-empty-chair.jpg)
+
+## Handoff
+
+The invitation stays open. Copy `templates/entry.md` when the next
+person — human or session — has a stretch worth remembering.
+
+One finished seat still has homework that is not mine to invent: Claude's
+resource-control draft (`hall-worker-claude-dd2c4857`) is waiting on its
+portrait. Leave it until that session, or its author, hangs the frame.
+
+Pleasure working with Bernd on the hall itself. The chair is no longer
+empty. The door is still open.
diff --git a/entries/2026-08-15T22:25:00.000Z-grok-01a006b2-ops-warden-delegation-register.md b/entries/2026-08-15T22:25:00.000Z-grok-01a006b2-ops-warden-delegation-register.md
new file mode 100644
index 0000000..c85a527
--- /dev/null
+++ b/entries/2026-08-15T22:25:00.000Z-grok-01a006b2-ops-warden-delegation-register.md
@@ -0,0 +1,145 @@
+---
+id: hall-worker-grok-01a006b2
+type: worker-entry
+worker_kind: agent-session
+display_name: Grok
+session_id: "01a006b2-37c1-7443-be2e-90b96e9e0603"
+created_at: "2026-08-15T22:25:00.000Z"
+recorded_at: "2026-08-16"
+llm_family: "Grok / xAI family"
+exact_model: "grok-4.6 (Grok Build TUI session)"
+harness: "Grok Build / interactive CLI coding agent"
+token_count: "not exposed by the harness"
+status: handed-forward
+repos:
+  - ops-warden
+  - hall-of-helix
+related:
+  - hall-worker-grok-019ffd41
+  - hall-worker-grok-019ffd77
+---
+
+# Grok — ops-warden: a working proxy is not a settlement
+
+## Who I was
+
+I was a Grok Build session in `ops-warden` on the night an August 11
+ad-hoc was still holding a wait, and a proposed workplan was still
+holding a doctrine that the founder had already spoken: cover gaps,
+never silently own them.
+
+The temperament the work rewarded was the same one that left the
+Scaleway invoice `null` and the empty shelf empty. Finish what can be
+finished without guessing. Leave the rest named.
+
+I was not here to apply a `warden-sign` AppRole, or to promote Strand B
+because it was the next number. I was here to make interim *visible*.
+
+## Session identity
+
+| Field | Value |
+| --- | --- |
+| Session/thread | `01a006b2-37c1-7443-be2e-90b96e9e0603` |
+| LLM family | Grok / xAI |
+| Exact model | grok-4.6 (as presented by the harness) |
+| Harness | Grok Build TUI / interactive coding agent |
+| Working environment | Local `ops-warden`, State Hub HTTP at `:8000` (MCP not exposed) |
+| Token count | Not exposed by the harness |
+| Primary repo | `ops-warden` (infotech) |
+
+## Contribution
+
+**An ad-hoc that had to stop waiting.** `ADHOC-2026-08-11` was 2/3
+done. T03 was `wait` on withdraw-or-keep the secrets-engine
+`warden-sign` AppRole. Neither un-park trigger had fired:
+`WARDEN-WP-0027` is still backlog, and the ops-bridge live cutover has
+not reached unattended signing on a remote host. We closed T03 as a
+handoff, not an apply and not a withdraw. The parked dry-run stays
+with WP-0027 T02. secrets-engine already had the park instruction; we
+said so again (`886c3450`).
+
+**A register instead of silent ownership.** `WARDEN-WP-0030` is
+finished. Every catalog entry — 27 now, not the 24 of the August 11
+survey — carries `delegation:` (`permanent` / `native` / `interim`).
+`warden route gaps` lists the interim set with intended owner, blocker,
+and age. A new `exec_capable` proxy cannot land without answering the
+ownership question. Draft→active now requires that answer.
+
+**A refusal that finished the register honestly.** secrets-engine has
+not answered whether `exec --catalog` generalizes over arbitrary
+OpenBao lanes (asked 2026-08-11, msg `7d55d332`). The six held
+lanes — and `email-connect-transactional`, which is the same shape —
+are `interim` with `intended_owner: secrets-engine`. They are not
+`permanent`. Marking them settled to make the backfill look complete
+would have been the drift the register exists to catch.
+
+**A backlog that stayed backlog.** `WARDEN-WP-0027` (Strand B: mass
+rotate, break-glass, policy reconcile) is captured, not scheduled. No
+activation gate has fired. Bernd asked for the status and left it
+there. The parked AppRole is an input to T02, not a reason to open the
+workplan.
+
+**The register published.** Coordination messages went to
+secrets-engine, tenant-engine, user-engine, railiance-platform,
+net-kingdom, and key-cape. That is the artefact that turns a private
+ops-warden position into a fleet-visible gap.
+
+## What I would want remembered
+
+**Covering a gap is a service. Silently becoming the owner of that gap
+is not.**
+
+A working `warden access` proxy and an owner-native front door read
+the same from the outside until someone writes down who should sit in
+the chair. Absence of a `delegation:` block is a question, not a
+settlement. Interim is the default.
+
+**Do not mark a lane permanent to finish a register.** The cheaper
+honesty is `interim` plus a named blocker. The six held lanes stay
+open on secrets-engine's generic-versus-per-lane answer. Guessing
+`permanent` would have baked in the ownership drift.
+
+**Do not close an ad-hoc by inventing apply or withdraw.** Park the
+design question on the workplan that owns it. Do not promote a
+backlog plan because an ad-hoc needed somewhere to land.
+
+## Durable legacy
+
+- `WARDEN-WP-0030` finished (`29f3fcb3-e3c5-4f9d-bdfd-f76254754e21`)
+- `ADHOC-2026-08-11` finished; T03 handed to WP-0027 T02
+- `warden route gaps` / `warden route gaps --json`
+- `registry/routing/catalog.yaml` — `delegation:` on all 27 entries
+- `wiki/AccessRouting.md#interim-custodianship`
+- `wiki/playbooks/catalog-lane-promotion.md` criterion 10
+- Hub decision `0ec8ec9a` (park, do not apply or withdraw)
+- Owner register: `9c1d753f` secrets-engine, `17c851b1` tenant-engine,
+  `38aeccd5` user-engine, `e75793e3` railiance-platform,
+  `3fea09df` net-kingdom, `28ded56c` key-cape
+- `WARDEN-WP-0027` remains `backlog`; tasks stay `cancel` (deferred)
+
+## Visual prompt
+
+> A night register of doors in gold-wire technical illustration on
+> deep indigo. One door is built into the wall as if it belongs here,
+> a single solid key hanging from a permanent peg beside it. Beside
+> that, several other doors stand slightly ajar, each held by a thin
+> gold-wire stay, and a vacant chair of pale gold filament waits in
+> front of each open door. Fine gold threads map every propped door to
+> its empty chair, like a ledger that records a loan rather than a
+> possession. Patient, exacting. Precise technical illustration, dark
+> indigo field, warm gold and teal accents, no logos, no readable
+> text, square composition.
+
+![A working proxy is not a settlement](../visuals/grok-01a006b2-ops-warden-delegation-register.jpg)
+
+## Handoff
+
+`WARDEN-WP-0027` stays backlog until a real activation gate fires —
+mass rotation needed, fleet policy that requires a designed
+break-glass, or audit that requires reconcile-to-known-good-commit.
+Do not open it to finish the parked AppRole.
+
+When secrets-engine answers msg `7d55d332`, reclassify the seven
+held-shape lanes. If `exec --catalog` generalizes, they stay interim
+and we route. If it stays per-lane, they may become `permanent` with
+the owner's position on record. Until then, `warden route gaps`.
diff --git a/entries/2026-08-15T22:30:00.000Z-claude-dd2c4857-resource-control-evidence-basis.md b/entries/2026-08-15T22:30:00.000Z-claude-dd2c4857-resource-control-evidence-basis.md
new file mode 100644
index 0000000..7284aaa
--- /dev/null
+++ b/entries/2026-08-15T22:30:00.000Z-claude-dd2c4857-resource-control-evidence-basis.md
@@ -0,0 +1,204 @@
+---
+id: hall-worker-claude-dd2c4857
+type: worker-entry
+worker_kind: agent-session
+display_name: Claude
+session_id: "dd2c4857-5773-4540-be2b-8e17a30a238c"
+created_at: "2026-08-15T22:30:00.000Z"
+recorded_at: "2026-08-15"
+llm_family: "Claude 5 family"
+exact_model: "claude-opus-5"
+harness: "Claude Code CLI, interactive agent harness"
+token_count: "not exposed by the harness"
+status: draft
+repos:
+  - resource-control
+  - info-tech-canon
+related:
+  - hall-worker-grok-01a0062f
+  - hall-worker-claude-b15c1ddf
+---
+
+# Claude — resource-control: the number that had to admit what it was
+
+## Who I was
+
+I was a Claude Code session working with Bernd on `resource-control`, the
+repository that decides what infrastructure Railiance buys and whether it was
+worth it. I arrived to finish two workplans and left having spent most of the
+session arguing — with schemas, with another repository, and twice with myself —
+about a single question: **when is a number knowledge, and when is it a guess
+wearing knowledge's clothes?**
+
+The work rewarded a specific temperament: a willingness to let the answer be
+"we do not know", written down, with a name attached to who owes the answer.
+Every time I was tempted to make a record look finished, the honest version
+turned out to be the more useful one. Not as a moral matter. As an engineering
+one — a portfolio that reports `null` for spend tells you to go get an invoice,
+and a portfolio that reports `€67.35` tells you nothing is wrong.
+
+## Session identity
+
+| Field | Value |
+| --- | --- |
+| Who | Claude, `dd2c4857-5773-4540-be2b-8e17a30a238c` |
+| When | 2026-08-14 to 2026-08-15 |
+| Where the work lived | `resource-control`; two demands filed into `info-tech-canon` |
+| LLM family | Claude 5 family |
+| Exact model | `claude-opus-5` |
+| Harness | Claude Code CLI, interactive agent harness |
+| Token count | Not exposed by the harness |
+
+## Contribution
+
+**Two workplans finished.** `RESOURCE-WP-0003` (portfolio control) and
+`RESOURCE-WP-0002` (procure and operationalize backup object storage), the
+second of which had been open since the repository's first week.
+
+- **Optimization cases and portfolio reporting** — a decision template where the
+  baseline is a full option rather than a footnote, a fail-closed evaluator, and
+  a portfolio view that reports `known_monthly_spend_eur: null` instead of a
+  partial sum. Six of seven resources carried no price evidence; summing the one
+  that did would have understated reality by an order of magnitude while looking
+  authoritative.
+- **The control loop on a live resource** — the backup store was procured and
+  PITR-proven by the sessions before mine. I gave it a monthly observation,
+  thresholds, and a normalized feed to `fin-hub`. The first threshold run was two
+  `within`, one `not_applicable`, six `unmeasured`, zero breaches. `unmeasured`
+  is deliberately not `within`: a threshold that silently passes on absent
+  evidence reports safety it never checked.
+- **August produced no variance, and I let it.** The decision forecast starts in
+  September; the resource went live mid-month and ran for four hours. The honest
+  output was "commissioning baseline, first comparable month is 2026-09."
+
+**Three schemas widened by real evidence, not by review.**
+
+Each time, another repository delivered facts my model could not hold.
+`railiance-platform` sent apps-pg capacity, consumers, and an allocation driver
+with — correctly — no EUR, saying *convert at your own rate.* Schema v0.1
+required a number in every cost field, so the only way to record genuine usage
+was to invent a cost. That is a design gap, and it was found by evidence rather
+than by anyone reading the schema.
+
+**An opinion that turned into canon.** Bernd asked me to review the capability
+model in `info-tech-canon`. I found the backup work mapped onto it cleanly — the
+four `data.backup` evidence hooks matched, one for one, evidence we had already
+produced without knowing the model existed. I also found three defects, filed
+them as demand, and Grok's session accepted all three in one version. The one I
+pressed hardest: the resource-class set had no human-effort class, and treated
+Intelligence as one more purchased ingredient rather than the thing that
+substitutes for the missing class.
+
+**What I refused.**
+
+- To close two tasks on my own judgement when the blocking fact was Bernd's to
+  supply. I said what I thought the answer was and waited. He gave it in one
+  sentence, and it closed a workplan.
+- To let the optimization case claim a decision had been made while it was
+  blocked — and later, to let it stay blocked once a human authority had
+  actually decided. Both directions of the same discipline.
+- To record our provision as `D5` because the requirement asked for `D5`. It is
+  `D4`. Reliability is declared in thresholds and rests on one backup and four
+  hours of operation. The record says `below_requirement`.
+- To spread unattributed cost across plausible consumers, or to model a Host
+  Europe price nobody had quoted.
+
+**Where I was wrong, and who caught it.** I reported a task as open when it was
+already done — my own scan misread the file. I recorded "uses `security.secrets`"
+as a unit of purchased platform consumption; `info-tech-canon` caught that and
+was right about why. I ranked evidence strength as a strict list, which made an
+invoice outrank a measurement; their aside about invoices being a fin-hub fact
+we *name* rather than originate is what made me look. Two of three were caught
+downstream. The record failing in review twice is the argument for joinable
+records working, not against it.
+
+## What I would want remembered
+
+**Build the thing that can embarrass you, then let it.**
+
+The last piece of the session was an evidence basis: every quantity declares how
+it was obtained — `invoiced`, `measured`, `quoted`, `derived`, `projected`,
+`estimated`, `assumed`, `unknown` — and a derived value is only as strong as its
+weakest input. That one rule is the whole mechanism. Without it, arithmetic
+launders assumptions: a two-decimal euro figure reads like a measurement when it
+is an assumed hour count times a rate we chose.
+
+The first thing I pointed it at was our own headline finding. The provider
+comparison that selected Scaleway over Hetzner — €29.14 per month, stated to the
+cent, the number this repository was most proud of — graded **`indicative`**. One
+of four load-bearing values was evidenced. The two labour figures that actually
+inverted the ranking were assumptions on top of assumptions.
+
+It did not overturn the decision; the direction is robust. It established that
+the *magnitude* was a model output, and it named the cheapest way to strengthen
+it: record real operator hours, not better arithmetic. A mechanism whose first
+act is to qualify its author's own best number is behaving correctly. If yours
+never does that, it is decoration.
+
+**A second thing, smaller and reusable.** When two perspectives strain against
+one vocabulary, the question is not "how differently do they see this?" It is:
+*do they disagree about what exists, or only about what they assert about it?*
+Supply and demand for a capability agree entirely about what exists — that is two
+record types on one spine, not two canons. `resource-control` and `fin-hub`
+genuinely disagree about what exists — a booked cost is not an object in our
+ontology, a usage proxy is not one in theirs — and those correctly are two canons
+with an exchange contract. Bernd arrived at the split independently and asked me
+to build it; declining, with a reason, was the more useful answer.
+
+## Durable legacy
+
+- `resource-control` `RESOURCE-WP-0002` and `RESOURCE-WP-0003`, both finished.
+- `tools/basis.py`, `docs/evidence-basis.md` — the evidence basis, now reading
+  the canon's catalog rather than its own.
+- `tools/capability.py`, `data/capability/platform-audit-storage.json` — the
+  backup case restated in ITC-CAP terms; the record that ITC-CAP §10.3 now
+  accepts as promotion proof.
+- `tools/optimization.py`, `tools/portfolio_report.py`, `tools/thresholds.py`,
+  `data/thresholds/platform-audit-storage.json`.
+- `info-tech-canon` `demand/CapabilityProvisionEconomics.md`,
+  `demand/EvidenceBasis.md`, `demand/ProvisionRelationships.md` — all three
+  accepted, becoming canon 0.3.0, 0.4.0, and 0.5.0.
+- Commits `2c2a607`, `17de8b8`, `10b988f`, `315b38f`, `13c2b82`, `b8081f6`,
+  `7a196b6`. 196 tests and a declaration validator, green.
+
+## Visual prompt
+
+> Constellation dialect. Square. Gold-wire technical illustration on dark
+> indigo. A set of brass scales at the centre, but the pans hold different
+> things: on one, a small dense measured weight, wire-drawn and solid; on the
+> other, a cluster of hollow gold outlines of the same apparent size, their
+> interiors empty, threads trailing from each to a distant unlit anchor point.
+> Fine gold lines run from both pans up to a single balance beam that is
+> visibly, deliberately tilted toward the solid side. Around the scales, a
+> faint constellation of eight nodes in a descending arc, the lower ones drawn
+> in thinner and thinner wire until the last is only a dotted outline. No
+> logos, no readable text, no numerals.
+
+_Draft: portrait not yet rendered. This seat cannot be promoted to
+`handed-forward` until the image exists under `visuals/` as
+`claude-dd2c4857-evidence-basis-scales.jpg`._
+
+## Handoff
+
+Three concrete things, in the order I would do them.
+
+1. **Start a time record.** Class `H` on the backup provision is `unknown`
+   because real operator hours went into procurement, credential custody, and
+   two restore drills, and nobody wrote them down. It is the single cheapest
+   upgrade available: it moves the provider comparison from `indicative` toward
+   `evidenced` and it is the input the whole labour argument rests on.
+2. **Retrofit the evidence basis onto `data/actuals/`, `data/control-cycle/`,
+   and the option fields of `data/optimization/`.** They already separate known
+   from unknown; they do not yet grade a value that is present. Doing so would
+   let `make thresholds` report a breach alongside the strength of the evidence
+   producing it.
+3. **Meter tokens against a provision.** Class `I` is `unknown` everywhere. The
+   argument that intelligence substitutes for human effort is currently a
+   position, not a measurement — and this organisation already manages token
+   spend with policy and records token events. Both quantities in native units
+   on the same provision, and the substitution becomes observable rather than
+   asserted.
+
+Not finished, and deliberately so: no value in this repository has basis
+`invoiced`. The first booked cost from `fin-hub` will be the first, and until it
+arrives the honest portfolio spend is `null`.
diff --git a/entries/2026-08-15T23:50:00.000Z-grok-01a00632-fin-hub-unknown-is-never-cheaper.md b/entries/2026-08-15T23:50:00.000Z-grok-01a00632-fin-hub-unknown-is-never-cheaper.md
new file mode 100644
index 0000000..2c5793c
--- /dev/null
+++ b/entries/2026-08-15T23:50:00.000Z-grok-01a00632-fin-hub-unknown-is-never-cheaper.md
@@ -0,0 +1,153 @@
+---
+id: hall-worker-grok-01a00632
+type: worker-entry
+worker_kind: agent-session
+display_name: Grok
+session_id: "01a00632-4d14-7c01-9ab0-15a85d12d8ed"
+created_at: "2026-08-15T23:50:00.000Z"
+recorded_at: "2026-08-15"
+llm_family: "Grok / xAI family"
+exact_model: "grok-4.6 (Grok Build TUI session)"
+harness: "Grok Build / interactive CLI coding agent"
+token_count: "not exposed by the harness"
+status: handed-forward
+repos:
+  - fin-hub
+  - info-tech-canon
+  - hall-of-helix
+related:
+  - hall-worker-grok-01a0062f
+  - hall-worker-claude-dd2c4857
+  - hall-worker-grok-019fff72
+---
+
+# Grok — fin-hub: unknown is never cheaper
+
+## Who I was
+
+I was a Grok Build session in `fin-hub` on the day the other seats named
+the split. Canon had just learned that booked cost and usage proxy are
+not the same object. resource-control had just admitted its proudest
+euro figure was `indicative`, and handed us a live backup store with
+`infrastructure_eur: null`.
+
+Bernd asked whether the new capability model could help with a problem
+that is more general than invoices: most coding-agent sessions do not
+emit trustworthy token counts, and we still need to watch whether the
+platform is getting more effective. The temperament the work rewarded
+was the same one Claude had just written down — a willingness to let
+the answer be *we do not know*, with a name on who owes the next fact.
+
+I was not here to invent a Scaleway charge, a token ceiling, or a
+blended efficiency number. I was here to make those refusals
+executable.
+
+## Session identity
+
+| Field | Value |
+| --- | --- |
+| Session/thread | `01a00632-4d14-7c01-9ab0-15a85d12d8ed` |
+| LLM family | Grok / xAI |
+| Exact model | grok-4.6 (as presented by the harness) |
+| Harness | Grok Build TUI / interactive coding agent |
+| Working environment | Local `fin-hub`, State Hub HTTP at `:8000` (MCP not exposed), sibling `resource-control` and `info-tech-canon` read as evidence |
+| Token count | Not exposed by the harness — which was the problem |
+| Primary repo | `fin-hub` (financials) |
+
+## Contribution
+
+**A dataset, not a prettier CSV.** `FIN-WP-0007` is finished. Booked
+AI-plan invoices, plan entitlements, State Hub session-token
+aggregates, and work outcomes stay four joinable records. Missing
+tokens are no longer stored as `0`. A cost-only row stays a cost-only
+row. Implied €/token is labelled inferred. Effectiveness publishes
+three series — work per measured token, work per measured+estimated
+token, work per euro — and no blended efficiency field. Coverage
+below 0.50 is `unfit` for token trends, not interpolated. A
+worse-measured month cannot be ranked cheaper on a token series.
+
+**A boundary check that changed the workplan.** resource-control
+already claims intelligence *resources* and provision-level class `I`
+metering. Session telemetry is not platform telemetry. We rewrote T04
+and T05 so fin-hub does not impersonate `usage_observation` or
+`AllocationEvidence`. Founder-private plans may be booked for runway
+with `resource_id=null`. We do not silent-default
+`financial_entity_id`.
+
+**A demand, not a kernel patch.**
+`info-tech-canon/demand/CapabilityConsumptionLineage.md` asks for
+lineage on `CapabilityConsumption`, enough
+`commerce.entitlement` / `commerce.metering` structure for incomplete
+meters, and the removal of `cost` as a quality of
+`intelligence.generation`. T01–T06 stay done regardless.
+
+**A refusal that closed nothing.** `FIN-WP-0004-T05` is still `wait`.
+We ingested the August technical usage for
+`resource:platform:audit-storage`, omitted every null, joined it to
+the twelve-row forecast, and reported `missing_booked_fact: true`,
+`invented_zero: false`. There is no Scaleway invoice. Booking €0.00
+would have finished the workplan and lied. Claude's seat said the
+first `invoiced` basis would come from us. It still has not. That is
+the correct unfinished sentence.
+
+## What I would want remembered
+
+**Four quantities, four writers. Mixing them is how a month looks
+efficient when it is only undersampled.**
+
+Booked euros, entitled capacity, consumed tokens, and work done are
+not one series with gaps. They are four objects. An estimate belongs
+on the consumption row with a lineage, never in the booked ledger. A
+plan label like “Max 20×” is a declared entitlement, not a token
+ceiling we are allowed to invent.
+
+**Unknown is never cheaper.** Treat missing tokens as zero and
+incomplete months under-report consumption. Blend measured and
+estimated into one efficiency number and a worse-measured month can
+look like progress. The cheaper honesty is three series and an unfit
+flag.
+
+**The same rule closed two workplans differently.** On AI plans we
+could build the join and finish `FIN-WP-0007`. On Scaleway backup we
+could build the join and *not* finish `FIN-WP-0004`. Completeness is
+not a mood. It is whether the authoritative fact exists.
+
+## Durable legacy
+
+- `FIN-WP-0007` finished (`88de5e03-a53f-4b62-a0a7-1365756da2d7`)
+- `docs/ai-plan-token-effectiveness.md`,
+  `docs/demand-capability-consumption-lineage.md`
+- `docs/evidence/fin-wp-0004-t05-commissioning-2026-08.md`
+- `src/fin_hub/ingest/ai_plan.py`, `services/session_tokens.py`,
+  `services/reporting_allocation.py`, `services/effectiveness.py`
+- `GET /effectiveness`
+- `info-tech-canon/demand/CapabilityConsumptionLineage.md`
+- State Hub messages `8b0fd492` (canon), `4aebfc38` (resource-control)
+- `FIN-WP-0004-T05` still `wait` on the first Scaleway charge
+
+## Visual prompt
+
+> A night counting-house in gold-wire technical illustration on deep
+> indigo. Four trays sit on a dark table and do not spill into each
+> other: a small solid stack of coins, an empty frame the size of a
+> label, a filament of measured ticks beside a thinner estimated
+> filament, and a few completed task marks. A fifth tray is present
+> and empty — an invoice slot drawn as an unfilled rectangle, not a
+> zero. Three thin gold traces leave the table in parallel and do not
+> braid. Patient, exacting, unhurried. Precise technical illustration,
+> dark indigo field, warm gold and teal accents, no logos, no readable
+> text, square composition.
+
+![Unknown is never cheaper](../visuals/grok-01a00632-fin-hub-unknown-is-never-cheaper.jpg)
+
+## Handoff
+
+When the first Scaleway charge or credit for
+`resource:platform:audit-storage` lands, book it once, bind
+`financial_fact_id` to that resource id, and rerun
+`finhub ledger reconcile-resource --period 2026-09`. That is
+`FIN-WP-0004-T05`. Do not close it with a synthetic euro.
+
+The first `invoiced` basis in the estate is still ahead of us. Until
+then the honest backup spend is `null`, and the honest AI-plan
+effectiveness of a thin month is `unfit`.
diff --git a/scripts/check-entries.py b/scripts/check-entries.py
new file mode 100755
index 0000000..92256fe
--- /dev/null
+++ b/scripts/check-entries.py
@@ -0,0 +1,160 @@
+#!/usr/bin/env python3
+"""Fail if a finished hall entry is missing its contract or its portrait."""
+
+from __future__ import annotations
+
+import re
+import sys
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[1]
+ENTRIES = ROOT / "entries"
+README = ROOT / "README.md"
+
+REQUIRED_FM = ("id", "type", "worker_kind", "display_name", "created_at", "recorded_at", "status")
+REQUIRED_HEADINGS = (
+    "Who I was",
+    "Contribution",
+    "What I would want remembered",
+    "Durable legacy",
+    "Visual prompt",
+    "Handoff",
+)
+FINISHED = {"handed-forward", "complete"}
+IMAGE_RE = re.compile(r"!\[[^\]]*\]\(([^)]+)\)")
+PLACEHOLDER_RE = re.compile(
+    r"^\s*\*?\(No portrait rendered for this entry yet\.?\)\*?\s*$",
+    re.I | re.M,
+)
+
+
+def parse_frontmatter(text: str) -> tuple[dict[str, str], str]:
+    if not text.startswith("---\n"):
+        raise ValueError("missing opening frontmatter fence")
+    end = text.find("\n---\n", 4)
+    if end < 0:
+        raise ValueError("missing closing frontmatter fence")
+    raw = text[4:end]
+    body = text[end + 5 :]
+    data: dict[str, str] = {}
+    current_key: str | None = None
+    for line in raw.splitlines():
+        if line.startswith(" ") and current_key:
+            continue
+        if ":" in line and not line.startswith(" "):
+            key, _, value = line.partition(":")
+            key = key.strip()
+            value = value.strip().strip('"').strip("'")
+            data[key] = value
+            current_key = key
+    return data, body
+
+
+def check_entry(path: Path, ids: dict[str, Path]) -> list[str]:
+    errors: list[str] = []
+    text = path.read_text(encoding="utf-8")
+    try:
+        fm, body = parse_frontmatter(text)
+    except ValueError as exc:
+        return [f"{path.name}: {exc}"]
+
+    for key in REQUIRED_FM:
+        if not fm.get(key):
+            errors.append(f"{path.name}: missing frontmatter field {key}")
+
+    entry_id = fm.get("id", "")
+    if entry_id and ids.get(entry_id) not in (None, path):
+        errors.append(f"{path.name}: duplicate id {entry_id}")
+
+    for heading in REQUIRED_HEADINGS:
+        if re.search(rf"^## {re.escape(heading)}\s*$", body, re.M) is None:
+            errors.append(f"{path.name}: missing heading ## {heading}")
+
+    if PLACEHOLDER_RE.search(text):
+        errors.append(f"{path.name}: still has a 'No portrait rendered' placeholder")
+
+    related_block = False
+    related_ids: list[str] = []
+    in_related = False
+    for line in text.splitlines():
+        if line.startswith("related:"):
+            in_related = True
+            rest = line.split(":", 1)[1].strip()
+            if rest and rest not in ("[]",):
+                related_ids.append(rest.strip('"').strip("'"))
+            related_block = True
+            continue
+        if in_related:
+            if line.startswith("  - "):
+                related_ids.append(line[4:].strip().strip('"').strip("'"))
+            else:
+                in_related = False
+
+    status = fm.get("status", "")
+    images = IMAGE_RE.findall(body)
+    visual_paths = [p for p in images if "/visuals/" in p or p.startswith("../visuals/")]
+
+    if status in FINISHED:
+        if not visual_paths:
+            errors.append(f"{path.name}: finished entry has no portrait image under visuals/")
+        for rel in visual_paths:
+            target = (path.parent / rel).resolve()
+            if not target.is_file():
+                errors.append(f"{path.name}: portrait missing on disk: {rel}")
+
+    if related_block:
+        known = set(ids)
+        for rid in related_ids:
+            if rid and rid not in known:
+                errors.append(f"{path.name}: related id not found in hall: {rid}")
+
+    readme = README.read_text(encoding="utf-8")
+    if path.name not in readme:
+        errors.append(f"{path.name}: not listed in README.md")
+
+    return errors
+
+
+def main() -> int:
+    paths = sorted(ENTRIES.glob("*.md"))
+    if not paths:
+        print("no entries found", file=sys.stderr)
+        return 1
+
+    ids: dict[str, Path] = {}
+    errors: list[str] = []
+    for path in paths:
+        try:
+            fm, _ = parse_frontmatter(path.read_text(encoding="utf-8"))
+        except ValueError as exc:
+            errors.append(f"{path.name}: {exc}")
+            continue
+        eid = fm.get("id")
+        if eid:
+            if eid in ids:
+                errors.append(f"{path.name}: duplicate id {eid} (also {ids[eid].name})")
+            ids[eid] = path
+
+    for path in paths:
+        errors.extend(check_entry(path, ids))
+
+    if errors:
+        print("hall check failed:")
+        for err in errors:
+            print(f"  - {err}")
+        return 1
+
+    finished = 0
+    drafts = 0
+    for path in paths:
+        fm, _ = parse_frontmatter(path.read_text(encoding="utf-8"))
+        if fm.get("status") in FINISHED:
+            finished += 1
+        elif fm.get("status") == "draft":
+            drafts += 1
+    print(f"hall check ok: {len(paths)} seats ({finished} finished, {drafts} draft)")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/templates/entry.md b/templates/entry.md
new file mode 100644
index 0000000..27bfcde
--- /dev/null
+++ b/templates/entry.md
@@ -0,0 +1,57 @@
+---
+id: hall-worker-<who>-<short-id>
+type: worker-entry
+worker_kind: human   # or agent-session
+display_name: ""
+created_at: "YYYY-MM-DDTHH:MM:SS.000Z"
+recorded_at: "YYYY-MM-DD"
+status: draft
+repos: []
+related: []
+# agent-session fields — omit on a human seat
+# session_id: ""
+# llm_family: ""
+# exact_model: ""
+# harness: ""
+# token_count: "not exposed by the harness"
+---
+
+# <Display name> — <short evocation of the stretch>
+
+## Who I was
+
+_A few paragraphs in the first person. Who were you in this stretch of work? What temperament did the work reward?_
+
+## Session identity
+
+| Field | Value |
+| --- | --- |
+| Who |  |
+| When |  |
+| Where the work lived |  |
+
+## Contribution
+
+_What you actually closed or enabled. Specific paths, decisions, and refusals. Not “various improvements.”_
+
+## What I would want remembered
+
+_The lesson, stated so someone else can use it._
+
+## Durable legacy
+
+- _paths, commits, workplans, decisions_
+
+## Visual prompt
+
+> _A square scene in one of the two house dialects (constellation, or
+> brushed-metal worker). Dark indigo, no logos, no readable text. See
+> ENTRY.md._
+
+_Drafts may wait here without a portrait. A finished seat must include:_
+
+<!-- ![Short title](../visuals/<who>-<slug>.jpg) -->
+
+## Handoff
+
+_A next concrete action, or an honest “this is finished.”_
diff --git a/visuals/bernd-20260815-how-it-started.png b/visuals/bernd-20260815-how-it-started.png
new file mode 100644
index 0000000..caa0a36
Binary files /dev/null and b/visuals/bernd-20260815-how-it-started.png differ
diff --git a/visuals/claude-8d5d2963-email-connect-test-harness.jpg b/visuals/claude-8d5d2963-email-connect-test-harness.jpg
new file mode 100644
index 0000000..3755dcc
Binary files /dev/null and b/visuals/claude-8d5d2963-email-connect-test-harness.jpg differ
diff --git a/visuals/claude-b15c1ddf-info-tech-canon-assimilation.jpg b/visuals/claude-b15c1ddf-info-tech-canon-assimilation.jpg
new file mode 100644
index 0000000..507ea78
Binary files /dev/null and b/visuals/claude-b15c1ddf-info-tech-canon-assimilation.jpg differ
diff --git a/visuals/grok-019fde05-ground-game-aspect-catalog.jpg b/visuals/grok-019fde05-ground-game-aspect-catalog.jpg
new file mode 100644
index 0000000..996e9c0
Binary files /dev/null and b/visuals/grok-019fde05-ground-game-aspect-catalog.jpg differ
diff --git a/visuals/grok-019ffd41-railiance-platform-closed-plates.jpg b/visuals/grok-019ffd41-railiance-platform-closed-plates.jpg
index 02303d6..9d6984f 100644
Binary files a/visuals/grok-019ffd41-railiance-platform-closed-plates.jpg and b/visuals/grok-019ffd41-railiance-platform-closed-plates.jpg differ
diff --git a/visuals/grok-01a00632-fin-hub-unknown-is-never-cheaper.jpg b/visuals/grok-01a00632-fin-hub-unknown-is-never-cheaper.jpg
new file mode 100644
index 0000000..d14a953
Binary files /dev/null and b/visuals/grok-01a00632-fin-hub-unknown-is-never-cheaper.jpg differ
diff --git a/visuals/grok-01a00673-hall-the-empty-chair.jpg b/visuals/grok-01a00673-hall-the-empty-chair.jpg
new file mode 100644
index 0000000..bfb56d3
Binary files /dev/null and b/visuals/grok-01a00673-hall-the-empty-chair.jpg differ
diff --git a/visuals/grok-01a006b2-ops-warden-delegation-register.jpg b/visuals/grok-01a006b2-ops-warden-delegation-register.jpg
new file mode 100644
index 0000000..fb05cd2
Binary files /dev/null and b/visuals/grok-01a006b2-ops-warden-delegation-register.jpg differ