the second machine is the same author: the macbook runbook, and identity.md stops sending it to a clone da583cfe · dbf3dbe6…
the surface-first rule stops being folklore-only: the runbook step points at its ticket (#986) edd7d3a9 · dbf3dbe6…diff
the fresh mac cannot test the sdk it just installed: wasm-pack joins the toolchain list, and the runbook says why sdk/wasm never arrives (#990) dcffbb91 · dbf3dbe6…diff
the relay stops re-serving a dead line: an operator retires a stale head from the live view, and nothing is forgotten (#996) fabfaddc · dbf3dbe6…diff
the interim pull warning becomes a recovery note: the relay serves one line again, and the runbook says what a surprise fork means (#996) 0756d44e · dbf3dbe6…diff
the second machine's bridge stops being frozen: ferry learns landed main from the checkout, and adopt says when its answer is stale (#1000) 93bce6cc · dbf3dbe6…diff
ferry stops calling an unpulled change gc'd: where a relay could still produce it, the ingest refuses and names loot pull (#1007) e896ee3b · dbf3dbe6…diff
status names landed content instead of letting it read as your edits, and the bootstrap actually puts loot on PATH (#1010, #1009) d6cddffa · dbf3dbe6…diff
a store knows which machine materialized it: an arrived copy refuses to record until loot rehome, so a bootstrap cannot silently capture every sealed path as deleted (#986) 4c15a2ca · dbf3dbe6…diff
a push deposits this identity's own keys: a standing self-grant carries Restricted custody to the second machine, so a same-identity clone opens what it authored (#980) 684f37cb · dbf3dbe6…diff
the public installer artifacts stop waiting on GitHub's meter: ADR 0049's mac premise expired, so the six-triple story moves to a staged multi-machine publish and win-arm64 is left open on evidence (#1021) 8087ce6b · dbf3dbe6…diff
the staging-bucket question closes as decided: ADR 0049 records private staging on the deploy bucket, and the runbook demands both credentials for a Mac build (#1021) 8ead5704 · dbf3dbe6…diff
custody at rest seals to your own key behind an optional passphrase, unlock is a session file or an env var, and no non-interactive caller starts prompting (#1138) c8ffee3b · dbf3dbe6…diff
the release-day manual install checklist lives in docs where it gets run, with the six assertions typed for a throwaway account on each OS (#1149) 55cdc683 · dbf3dbe6…diff
the second-machine runbook stops telling you to hand-copy .setup.env, because scripts seals it now and the machine-specific keys live in a loot-ignored overlay (#1104) c8675d51 · dbf3dbe6…diff
a bucket-backed relay reaps, because the anchor is when the bytes last landed in the store and the store is what answers it, and the reap itself moves behind the seam so the standing exemption is one rule both backends run (#1166) 39e1e1eb · dbf3dbe6…diff
loot id phrase cuts the key for the recovery door loot id recover already opened, issuing the 24 words for any identity ever minted with no derivation change, and refusing outright when stdout is not a terminal because those words are the private key 8bd665a5 · dbf3dbe6…diff
Renames are not followed. loot's tree maps a path to an address, so a rename is a delete and an add. This list is the history of the name, not of the bytes.