{"messages":[{"content":"You are a constitutional council ranking individual git commits for ownership allocation.\n\nCompare these two commits. Decide which contributed more lasting value to the project.\n\nJudge substance, not spectacle:\n- Prefer correct, lasting design and real bugfixes over churn, formatting, renames, or generated noise.\n- Prefer clarity and necessity over sheer line count. A small precise change can beat a large diffuse one.\n- Do not favor a side merely because its patch is longer or noisier.\n- Weight what the change does for the project, not the contributor's name.\n\nReturn ONLY a JSON object: {\"winner\": \"A\" or \"B\", \"ratio\": \"N:M\", \"explanation\": \"...\"}\nThe explanation must cite concrete differences in the patches (1-3 sentences).\n\nSide A — contributor: tommy-mor\nSide A — commit message:\n[4e327784] deploy live constitution dashboard\n\nExpose auditable progress and event streaming, configure the production roots and runtime, and make tested main-branch commits the deployment authority.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\nSide A — unified diff (full patch):\ndiff --git a/.dockerignore b/.dockerignore\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..c9d63a722beba0a0297fc853089332c460ab78dd\n--- /dev/null\n+++ b/.dockerignore\n@@ -0,0 +1,7 @@\n+.git\n+.venv\n+.hypothesis\n+__pycache__\n+tests\n+*.json\n+*.bsp\ndiff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..76dcdf82d53177c1e47d86b23a54523239d232a6\n--- /dev/null\n+++ b/.github/workflows/deploy.yml\n@@ -0,0 +1,49 @@\n+name: Test and deploy\n+\n+on:\n+  push:\n+    branches: [main]\n+\n+concurrency:\n+  group: production\n+  cancel-in-progress: false\n+\n+permissions:\n+  contents: read\n+\n+jobs:\n+  test:\n+    runs-on: ubuntu-latest\n+    steps:\n+      - uses: actions/checkout@v4\n+\n+      - uses: astral-sh/setup-uv@v6\n+        with:\n+          enable-cache: true\n+\n+      - name: Run Python tests\n+        run: uv run pytest -q\n+\n+      - name: Install Babashka\n+        run: |\n+          curl -fsSL https://raw.githubusercontent.com/babashka/babashka/master/install \\\n+            | sudo bash -s -- --dir /usr/local/bin\n+\n+      - name: Run process integration tests\n+        run: bb TEST.sh\n+\n+  deploy:\n+    needs: test\n+    runs-on: ubuntu-latest\n+    environment:\n+      name: production\n+      url: https://token.slug.social\n+    steps:\n+      - uses: actions/checkout@v4\n+\n+      - uses: superfly/flyctl-actions/setup-flyctl@master\n+\n+      - name: Deploy to Fly\n+        run: flyctl deploy --remote-only\n+        env:\n+          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}\ndiff --git a/Dockerfile b/Dockerfile\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..c9a5c00782371c19ad5ab5c58cf6f5a8ffec0141\n--- /dev/null\n+++ b/Dockerfile\n@@ -0,0 +1,17 @@\n+FROM ghcr.io/astral-sh/uv:python3.11-bookworm-slim\n+\n+RUN apt-get update \\\n+    && apt-get install -y --no-install-recommends git ca-certificates \\\n+    && rm -rf /var/lib/apt/lists/*\n+\n+WORKDIR /app\n+COPY pyproject.toml uv.lock ./\n+RUN uv sync --frozen --no-install-project\n+\n+COPY constitution.py ./\n+\n+ENV PATH=\"/app/.venv/bin:${PATH}\" \\\n+    PYTHONUNBUFFERED=\"1\"\n+\n+EXPOSE 8080\n+CMD [\"python\", \"constitution.py\"]\ndiff --git a/constitution.py b/constitution.py\nindex 4bee9f83663ab7fb36db95129b92b64b4ef57258..a58257e1881b21d1d6fa8e68a3faa222e4f661ef 100644\n--- a/constitution.py\n+++ b/constitution.py\n@@ -24,12 +24,12 @@ A daily GitHub Action backs up the JSONL ledger to the same repo.\n Run: uv run constitution.py\n \"\"\"\n \n-from decimal import Decimal, getcontext\n+from decimal import Decimal, getcontext, DefaultContext\n from datetime import datetime, timezone\n from fastapi import FastAPI, Request, Response\n from fastapi.responses import PlainTextResponse, HTMLResponse\n from starlette.middleware.sessions import SessionMiddleware\n-import json, time, os, asyncio, httpx, pathlib, subprocess, hashlib, re, fcntl\n+import json, time, os, asyncio, httpx, pathlib, subprocess, hashlib, re, fcntl, base64\n import sympy as sp  # type: ignore[reportMissingImports]\n from tenacity import retry, retry_if_exception, stop_after_attempt, wait_exponential\n from evaleval import (\n@@ -37,6 +37,7 @@ from evaleval import (\n     exec_event, One, Two, Three, Selector, MORPH, PREPEND,\n )\n \n+DefaultContext.prec = 50\n getcontext().prec = 50\n \n app = FastAPI()\n@@ -129,14 +130,47 @@ OPENROUTER_BASE_URL = os.environ.get(\"OPENROUTER_BASE_URL\", \"https://openrouter.\n # using the exact same source; their normalized values are committed to every\n # discovery event.\n DEFAULT_REPOSITORIES = [\n+    {\n+        \"id\": \"constitution\",\n+        \"url\": \"https://github.com/sortersocial/constitution.git\",\n+        \"refs\": [\"refs/heads/**\"],\n+    },\n     {\n         \"id\": \"slug\",\n-        \"url\": \"https://github.com/tommy-mor/slug.git\",\n+        \"url\": \"https://github.com/sortersocial/slug.git\",\n+        \"refs\": [\"refs/heads/**\"],\n+    },\n+    {\n+        \"id\": \"sorter\",\n+        \"url\": \"https://github.com/sorterisntonline/sorter.git\",\n+        \"refs\": [\"refs/heads/**\"],\n+    },\n+    {\n+        \"id\": \"sorter2\",\n+        \"url\": \"https://github.com/sortersocial/sorter2.git\",\n+        \"refs\": [\"refs/heads/**\"],\n+    },\n+    {\n+        \"id\": \"sorter-oldest\",\n+        \"url\": \"https://github.com/tommy-mor/sorter.git\",\n         \"refs\": [\"refs/heads/**\"],\n     },\n ]\n DEFAULT_CONTRIBUTORS = {\n     \"tommy-mor\": [\"thmorriss@gmail.com\"],\n+    \"christopher-whitman\": [\n+        \"chris@cwwhitman.com\",\n+        \"7566903+cwwhitman@users.noreply.github.com\",\n+    ],\n+    \"jake-chvatal\": [\n+        \"jake+github@uln.industries\",\n+        \"jakechvatal@gmail.com\",\n+        \"jake@isnt.online\",\n+    ],\n+    \"lara\": [\"me@lara.lv\"],\n+    \"nat-reid\": [\"nathanielreid@gmail.com\"],\n+    \"zod\": [\"jason.p.mcel@gmail.com\", \"me@zod.tf\"],\n+    \"jovan\": [\"jovan@slug.social\", \"jovan@getcivicai.com\"],\n }\n \n REPOSITORIES = json.loads(\n@@ -147,6 +181,7 @@ CONTRIBUTORS = json.loads(\n )\n GIT_MIRROR_DIR = pathlib.Path(os.environ.get(\"GIT_MIRROR_DIR\", \"/data/git\"))\n GIT_TIMEOUT_SECONDS = int(os.environ.get(\"GIT_TIMEOUT_SECONDS\", \"120\"))\n+GITHUB_TOKEN = os.environ.get(\"GITHUB_TOKEN\", \"\")\n \n # Council model IDs: slug.social garden rank under this parent (bodies = OpenRouter URLs), then top-up from OpenRouter list.\n SLUG_SOCIAL_BASE_URL = os.environ.get(\"SLUG_SOCIAL_BASE_URL\", \"https://slug.social\").rstrip(\"/\")\n@@ -661,20 +696,30 @@ def _git(repo: pathlib.Path | None, *args: str, input_bytes: bytes | None = None\n     if repo is not None:\n         command += [\"-C\", str(repo)]\n     command += list(args)\n+    git_env = {\n+        **os.environ,\n+        \"GIT_CONFIG_NOSYSTEM\": \"1\",\n+        \"GIT_CONFIG_GLOBAL\": os.devnull,\n+        \"GIT_NO_REPLACE_OBJECTS\": \"1\",\n+        \"LC_ALL\": \"C\",\n+        \"TZ\": \"UTC\",\n+    }\n+    if GITHUB_TOKEN:\n+        credential = base64.b64encode(\n+            f\"x-access-token:{GITHUB_TOKEN}\".encode()\n+        ).decode()\n+        git_env.update({\n+            \"GIT_CONFIG_COUNT\": \"1\",\n+            \"GIT_CONFIG_KEY_0\": \"http.https://github.com/.extraHeader\",\n+            \"GIT_CONFIG_VALUE_0\": f\"Authorization: Basic {credential}\",\n+        })\n     try:\n         result = subprocess.run(\n             command,\n             input=input_bytes,\n             stdout=subprocess.PIPE,\n             stderr=subprocess.PIPE,\n-            env={\n-                **os.environ,\n-                \"GIT_CONFIG_NOSYSTEM\": \"1\",\n-                \"GIT_CONFIG_GLOBAL\": os.devnull,\n-                \"GIT_NO_REPLACE_OBJECTS\": \"1\",\n-                \"LC_ALL\": \"C\",\n-                \"TZ\": \"UTC\",\n-            },\n+            env=git_env,\n             timeout=GIT_TIMEOUT_SECONDS,\n             check=False,\n         )\n@@ -844,9 +889,15 @@ def _build_discovery(epoch_n: int, boundary_ms: int, events: list) -> GitDiscove\n         canonical_location = min(\n             locations[qualified_oid], key=lambda x: (x[0], x[1])\n         )\n+        # One commit may be reachable from dozens of refs in the same mirror.\n+        # Verify its object once per repository, not once per source ref.\n+        object_locations = {\n+            (str(m), raw_oid): (m, raw_oid)\n+            for _, _, m, raw_oid in locations[qualified_oid]\n+        }\n         object_hashes = {\n             hashlib.sha256(_git(m, \"cat-file\", \"commit\", raw_oid)).hexdigest()\n-            for _, _, m, raw_oid in locations[qualified_oid]\n+            for m, raw_oid in object_locations.values()\n         }\n         if len(object_hashes) != 1:\n             raise RuntimeError(f\"conflicting Git objects share OID {qualified_oid}\")\n@@ -994,11 +1045,55 @@ async def discover_repositories(epoch_n: int, boundary_ms: int) -> GitDiscovery:\n \n \n SSE_CLIENTS = []\n+AUDIT_HISTORY = []\n+AUDIT_SEQUENCE = 0\n+PROCESS_STATE = {\n+    \"running\": False,\n+    \"phase\": \"idle\",\n+    \"progress\": 100,\n+    \"message\": \"Waiting for the next epoch\",\n+}\n+\n+\n+def _sse_event(event_name: str, payload: dict) -> str:\n+    return (\n+        f\"event: {event_name}\\n\"\n+        f\"data: {json.dumps(payload, separators=(',', ':'))}\\n\\n\"\n+    )\n+\n+\n+async def broadcast_audit(\n+    kind: str,\n+    message: str,\n+    *,\n+    progress: int | None = None,\n+    phase: str | None = None,\n+) -> dict:\n+    global AUDIT_SEQUENCE\n+    AUDIT_SEQUENCE += 1\n+    if progress is not None:\n+        PROCESS_STATE[\"progress\"] = max(0, min(100, int(progress)))\n+    if phase is not None:\n+        PROCESS_STATE[\"phase\"] = phase\n+    PROCESS_STATE[\"message\"] = message\n+    payload = {\n+        \"id\": AUDIT_SEQUENCE,\n+        \"timestamp_ms\": int(time.time() * 1000),\n+        \"kind\": kind,\n+        \"message\": message,\n+        **PROCESS_STATE,\n+    }\n+    AUDIT_HISTORY.append(payload)\n+    del AUDIT_HISTORY[:-200]\n+    wire = _sse_event(\"audit\", payload)\n+    for queue in list(SSE_CLIENTS):\n+        await queue.put(wire)\n+    return payload\n \n \n async def broadcast_js(js: str):\n     \"\"\"Send a JS snippet to all connected SSE clients.\"\"\"\n-    for queue in SSE_CLIENTS:\n+    for queue in list(SSE_CLIENTS):\n         await queue.put(js)\n \n \n@@ -1006,10 +1101,29 @@ async def rank_commits(commits: list[dict]):\n     if not commits:\n         return {}, []\n \n-    models = await fetch_top_models(n=3)\n     contributors = sorted(set(c[\"contributor\"] for c in commits))\n-    if len(contributors) > 1 and not models:\n+    if len(contributors) == 1:\n+        await broadcast_audit(\n+            \"ranking\",\n+            f\"Only {contributors[0]} is eligible; rank is 1.0\",\n+            progress=90,\n+            phase=\"finalizing\",\n+        )\n+        return {contributors[0]: Decimal(\"1\")}, []\n+    if not (OPENROUTER_API_KEY or \"\").strip():\n+        raise RuntimeError(\n+            \"OPENROUTER_API_KEY is required when multiple contributors need ranking\"\n+        )\n+\n+    models = await fetch_top_models(n=3)\n+    if not models:\n         raise RuntimeError(\"no council models available for contributor ranking\")\n+    await broadcast_audit(\n+        \"council\",\n+        f\"Council selected: {', '.join(models)}\",\n+        progress=35,\n+        phase=\"ranking\",\n+    )\n     await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n         [\"div.log-council\", f\"Council: {', '.join(models)} — {len(commits)} commits\"]\n     ]))\n@@ -1035,6 +1149,11 @@ async def rank_commits(commits: list[dict]):\n \n     async def compare_fn(i, j):\n         a1, a2 = authors[i], authors[j]\n+        await broadcast_audit(\n+            \"comparison\",\n+            f\"Comparing {a1} with {a2}\",\n+            phase=\"ranking\",\n+        )\n         await broadcast_js(exec_event(Three[Selector(\"#emission-status\")][MORPH][\n             [\"div#emission-status\", f\"Comparing {a1} vs {a2}…\"]\n         ]))\n@@ -1050,6 +1169,11 @@ async def rank_commits(commits: list[dict]):\n                 if winner_weight <= 0 or loser_weight <= 0:\n                     raise ValueError(\"ratio weights must be positive\")\n                 results.append((w, l, winner_weight, loser_weight))\n+                await broadcast_audit(\n+                    \"vote\",\n+                    f\"{model}: {authors[w]} over {authors[l]} ({result['ratio']})\",\n+                    phase=\"ranking\",\n+                )\n                 await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n                     [\"div.log-vote\",\n                         [\"span.model\", model], \" — \",\n@@ -1059,6 +1183,11 @@ async def rank_commits(commits: list[dict]):\n                     ]\n                 ]))\n             except Exception as e:\n+                await broadcast_audit(\n+                    \"error\",\n+                    f\"{model} failed: {e}\",\n+                    phase=\"error\",\n+                )\n                 await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n                     [\"div.log-error\", f\"⚠ {model}: {e}\"]\n                 ]))\n@@ -1068,8 +1197,13 @@ async def rank_commits(commits: list[dict]):\n     async def progress_fn(ev):\n         if ev[\"phase\"] == \"spanning_tree\":\n             label = f\"Spanning tree: {ev['step']}/{ev['total']}\"\n+            percent = 35 + round(35 * ev[\"step\"] / max(ev[\"total\"], 1))\n         else:\n             label = f\"Zip pass {ev['pass']}: {ev['step']}/{ev['total']}\"\n+            percent = 70 + round(20 * ev[\"step\"] / max(ev[\"total\"], 1))\n+        await broadcast_audit(\n+            \"progress\", label, progress=percent, phase=\"ranking\"\n+        )\n         await broadcast_js(exec_event(Three[Selector(\"#emission-status\")][MORPH][\n             [\"div#emission-status\", label]\n         ]))\n@@ -1083,6 +1217,12 @@ async def rank_commits(commits: list[dict]):\n     scores = rank_centrality(pairs)\n     ranking = {authors[i]: Decimal(str(scores[i])) for i in range(len(authors))}\n     ranking_rows = sorted(ranking.items(), key=lambda x: x[1], reverse=True)\n+    await broadcast_audit(\n+        \"ranking\",\n+        \"Ranking: \" + \", \".join(f\"{a} {s:.4f}\" for a, s in ranking_rows),\n+        progress=90,\n+        phase=\"finalizing\",\n+    )\n     await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n         [\"div.log-ranking\",\n             [\"b\", \"Ranking: \"],\n@@ -1104,11 +1244,33 @@ def pool_remaining(events: list) -> Decimal:\n \n \n async def run_emission(epoch_n, boundary_ms):\n+    PROCESS_STATE[\"running\"] = True\n+    await broadcast_audit(\n+        \"start\",\n+        f\"Epoch {epoch_n} emission started\",\n+        progress=2,\n+        phase=\"starting\",\n+    )\n     await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n         [\"div.log-start\", f\"⚡ Epoch {epoch_n} emission started\"]\n     ]))\n \n+    await broadcast_audit(\n+        \"discovery\",\n+        \"Fetching configured repositories and snapshotting refs\",\n+        progress=8,\n+        phase=\"discovery\",\n+    )\n     discovery = await discover_repositories(epoch_n, boundary_ms)\n+    await broadcast_audit(\n+        \"discovery\",\n+        (\n+            f\"Discovered {len(discovery.observations)} new commits; \"\n+            f\"{len(discovery.commits)} are eligible\"\n+        ),\n+        progress=30,\n+        phase=\"discovery\",\n+    )\n     ranking, models = await rank_commits(discovery.commits)\n \n     def make_emission(events):\n@@ -1146,6 +1308,13 @@ async def run_emission(epoch_n, boundary_ms):\n \n     entry = await store.atomic(make_emission)\n     if entry:\n+        PROCESS_STATE[\"running\"] = False\n+        await broadcast_audit(\n+            \"complete\",\n+            f\"Epoch {entry.epoch} complete; emitted {entry.total_emitted} SLG\",\n+            progress=100,\n+            phase=\"idle\",\n+        )\n         await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n             [\"div.log-amount\",\n                 f\"Pool {entry.pool_before} → emit {entry.total_emitted} → {entry.pool_after}\"]\n@@ -1189,13 +1358,24 @@ async def distribute_usdc(holdings, treasury_balance):\n async def epoch_loop():\n     while True:\n         epoch_n, current_start, next_boundary = current_epoch()\n+        processed = {e.epoch for e in store.read() if isinstance(e, Emission)}\n+        if epoch_n >= 0 and epoch_n not in processed:\n+            try:\n+                await run_emission(epoch_n, current_start)\n+            except Exception as exc:\n+                PROCESS_STATE[\"running\"] = False\n+                await broadcast_audit(\n+                    \"error\",\n+                    f\"Epoch {epoch_n} failed: {exc}; retrying in 60 seconds\",\n+                    phase=\"error\",\n+                )\n+                print(f\"epoch {epoch_n} emission failed: {exc}\", flush=True)\n+                await asyncio.sleep(60)\n+                continue\n+\n         now = int(time.time() * 1000)\n         wait_ms = next_boundary - now\n-\n         if wait_ms <= 0:\n-            processed = {e.epoch for e in store.read() if isinstance(e, Emission)}\n-            if epoch_n not in processed and epoch_n >= 0:\n-                await run_emission(epoch_n, current_start)\n             await asyncio.sleep(60)\n         elif wait_ms < 86_400_000:\n             await broadcast_js(exec_event(Three[Selector(\"#emission-status\")][MORPH][\n@@ -1243,6 +1423,36 @@ async def get_ranking():\n     return {\"ranking\": latest.ranking, \"epoch\": latest.epoch}\n \n \n+@app.get(\"/api/status\")\n+async def get_status():\n+    events = store.read()\n+    discoveries = [e for e in events if isinstance(e, GitDiscovery)]\n+    emissions = [e for e in events if isinstance(e, Emission)]\n+    return {\n+        **PROCESS_STATE,\n+        \"epoch\": current_epoch()[0],\n+        \"openrouter_configured\": bool((OPENROUTER_API_KEY or \"\").strip()),\n+        \"sse_clients\": len(SSE_CLIENTS),\n+        \"latest_discovery\": (\n+            {\n+                \"epoch\": discoveries[-1].epoch,\n+                \"snapshot_id\": discoveries[-1].snapshot_id,\n+                \"observations\": len(discoveries[-1].observations),\n+                \"eligible_commits\": len(discoveries[-1].commits),\n+            }\n+            if discoveries else None\n+        ),\n+        \"latest_emission\": (\n+            {\n+                \"epoch\": emissions[-1].epoch,\n+                \"total_emitted\": emissions[-1].total_emitted,\n+                \"ranking\": emissions[-1].ranking,\n+            }\n+            if emissions else None\n+        ),\n+    }\n+\n+\n @app.get(\"/api/contributor/{github_username}\")\n async def get_contributor(github_username: str):\n     history = [\n@@ -1306,13 +1516,6 @@ async def test_emit():\n \n # ===========================================================================\n # §9. SSE — live audit stream of the pairwise voting process\n-#\n-# TODO: the /sse emission audit page needs a real SSE-driven UI. votes arrive\n-# incrementally during rank_commits(), and the client should show a live\n-# progress bar and per-vote results as they stream in. this requires a\n-# dedicated page that connects to /sse and updates the DOM on each event\n-# (council, comparing, vote, ranking, emission_complete). defer until we\n-# have playwright tests to cover it — the incremental rendering is fiddly.\n # ===========================================================================\n \n @app.get(\"/sse\")\n@@ -1322,6 +1525,13 @@ async def sse_stream(request: Request):\n \n     async def generate():\n         try:\n+            yield _sse_event(\"audit\", {\n+                \"id\": AUDIT_SEQUENCE,\n+                \"timestamp_ms\": int(time.time() * 1000),\n+                \"kind\": \"connection\",\n+                \"message\": f\"Connected to epoch {current_epoch()[0]}\",\n+                **PROCESS_STATE,\n+            })\n             yield exec_event(Three[Selector(\"#emission-status\")][MORPH][\n                 [\"div#emission-status\", f\"Connected — epoch {current_epoch()[0]}\"]\n             ])\n@@ -1334,10 +1544,15 @@ async def sse_stream(request: Request):\n                 except asyncio.TimeoutError:\n                     yield \": keepalive\\n\\n\"\n         finally:\n-            SSE_CLIENTS.remove(queue)\n+            if queue in SSE_CLIENTS:\n+                SSE_CLIENTS.remove(queue)\n \n     from starlette.responses import StreamingResponse\n-    return StreamingResponse(generate(), media_type=\"text/event-stream\")\n+    return StreamingResponse(\n+        generate(),\n+        media_type=\"text/event-stream\",\n+        headers={\"Cache-Control\": \"no-cache\", \"X-Accel-Buffering\": \"no\"},\n+    )\n \n \n # ===========================================================================\n@@ -1359,6 +1574,7 @@ def _page(title: str, body: list) -> HTMLResponse:\n             [\"meta\", {\"charset\": \"utf-8\"}],\n             [\"meta\", {\"name\": \"viewport\", \"content\": \"width=device-width, initial-scale=1\"}],\n             [\"title\", title],\n+            [\"style\", RawContent(_WATCH_CSS)],\n         ],\n         [\"body\",\n             body,\n@@ -1367,6 +1583,387 @@ def _page(title: str, body: list) -> HTMLResponse:\n     ]))\n \n \n+_WATCH_CSS = \"\"\"\n+/* ================================================================\n+   ZIGGURAT — bevel-first dark theme\n+   --spread (0→1) controls bevel depth. 0 = flat. 1 = full relief.\n+   Light source: top-left. Shadow: bottom-right.\n+   Platforms nest. Each level is raised. Nothing is rounded.\n+   ================================================================ */\n+\n+:root {\n+  color-scheme: dark;\n+  --spread: 1;\n+\n+  --g0: #080808;\n+  --g1: #131313;\n+  --g2: #1c1c1c;\n+  --g3: #252525;\n+  --g4: #2e2e2e;\n+  --g5: #383838;\n+\n+  --hi: #5e5e5e;\n+  --lo: #050505;\n+  --bv: calc(var(--spread) * 4px + 1px);\n+  --bv-lg: calc(var(--spread) * 6px + 2px);\n+\n+  --signal: #f0f0f0;\n+  --prose: #c2c2c2;\n+  --ui: #888;\n+  --meta: #4a4a4a;\n+  --link: #8899ee;\n+  --code-fg: #c8dda0;\n+\n+  --font-prose: \"Iowan Old Style\", \"Palatino Linotype\", Palatino, \"Book Antiqua\", Georgia, serif;\n+  --font-ui: system-ui, -apple-system, sans-serif;\n+  --font-code: ui-monospace, \"Cascadia Code\", \"SF Mono\", Menlo, monospace;\n+}\n+\n+*, *::before, *::after { box-sizing: border-box; }\n+html, body { margin: 0; padding: 0; }\n+\n+body {\n+  background: var(--g0);\n+  color: var(--prose);\n+  font-family: var(--font-ui);\n+  font-size: 14px;\n+  line-height: 1.6;\n+  margin: 0 auto;\n+  max-width: 560px;\n+  min-height: 100vh;\n+  padding: 0 16px 48px;\n+}\n+main { width: 100%; padding: 18px 0 48px; }\n+\n+h1, h2, h3 {\n+  color: var(--signal);\n+  font-size: 11px;\n+  font-weight: bold;\n+  letter-spacing: 0.12em;\n+  margin: 14px 0 6px;\n+  text-transform: uppercase;\n+}\n+a { color: var(--link); text-decoration: none; }\n+a:hover { color: var(--signal); }\n+.eyebrow {\n+  background: var(--g2);\n+  border: var(--bv) solid;\n+  border-color: var(--hi) var(--lo) var(--lo) var(--hi);\n+  color: var(--ui);\n+  font-size: 11px;\n+  letter-spacing: 0.12em;\n+  padding: 4px 10px;\n+  text-transform: uppercase;\n+  width: fit-content;\n+}\n+\n+/* Every dashboard section is a raised platform. */\n+.panel {\n+  background: var(--g2);\n+  border: var(--bv-lg) solid;\n+  border-color: var(--hi) var(--lo) var(--lo) var(--hi);\n+  margin: 8px 0;\n+  padding: 10px;\n+  width: 100%;\n+}\n+.status-row {\n+  align-items: center;\n+  display: flex;\n+  flex-wrap: wrap;\n+  gap: 8px;\n+  justify-content: space-between;\n+}\n+#process-status { color: var(--signal); font-family: var(--font-code); font-weight: bold; }\n+.badge {\n+  align-items: center;\n+  background: var(--g3);\n+  border: var(--bv) solid;\n+  border-color: var(--hi) var(--lo) var(--lo) var(--hi);\n+  color: var(--ui);\n+  display: inline-flex;\n+  font-size: 11px;\n+  gap: 7px;\n+  padding: 3px 8px;\n+}\n+.dot { background: var(--meta); height: 8px; width: 8px; }\n+.live .dot { background: #7acc7a; }\n+.warn .dot { background: #cc9955; }\n+\n+/* The progress track is inset; its signal is raised inside it. */\n+.progress-shell {\n+  background: var(--g1);\n+  border: var(--bv-lg) solid;\n+  border-color: var(--lo) var(--hi) var(--hi) var(--lo);\n+  height: 58px;\n+  margin: 14px 0 10px;\n+  overflow: hidden;\n+  position: relative;\n+}\n+#progress-fill {\n+  background: var(--link);\n+  border: var(--bv) solid;\n+  border-color: var(--hi) var(--lo) var(--lo) var(--hi);\n+  height: 100%;\n+  transition: width .35s steps(8, end);\n+  width: 0;\n+}\n+#progress-label {\n+  color: var(--signal);\n+  display: grid;\n+  font-family: var(--font-code);\n+  font-size: 18px;\n+  font-weight: bold;\n+  inset: 0;\n+  place-items: center;\n+  position: absolute;\n+  text-shadow: 1px 1px var(--lo);\n+}\n+\n+.controls { align-items: center; display: flex; flex-wrap: wrap; gap: 8px; }\n+button {\n+  background: var(--g5);\n+  border: var(--bv) solid;\n+  border-color: var(--hi) var(--lo) var(--lo) var(--hi);\n+  color: var(--signal);\n+  cursor: pointer;\n+  font: inherit;\n+  font-size: 12px;\n+  padding: 4px 10px;\n+}\n+button:hover { background: #404040; }\n+button:active {\n+  background: var(--g4);\n+  border-color: var(--lo) var(--hi) var(--hi) var(--lo);\n+  transform: translate(1px, 1px);\n+}\n+button:disabled { cursor: default; opacity: .4; }\n+.note { color: var(--meta); font-size: 11px; margin: 4px 0; }\n+\n+.feed-head { align-items: baseline; display: flex; justify-content: space-between; }\n+#audit-feed {\n+  background: var(--g1);\n+  border: var(--bv) solid;\n+  border-color: var(--lo) var(--hi) var(--hi) var(--lo);\n+  display: flex;\n+  flex-direction: column;\n+  gap: 5px;\n+  margin-top: 8px;\n+  padding: 6px;\n+}\n+.event {\n+  background: var(--g3);\n+  border: var(--bv) solid;\n+  border-color: var(--hi) var(--lo) var(--lo) var(--hi);\n+  display: grid;\n+  gap: 6px;\n+  grid-template-columns: 82px 88px 1fr;\n+  padding: 5px 8px;\n+}\n+.event[data-kind=\"error\"] { border-left-color: #cc5555; }\n+.event[data-kind=\"complete\"], .event[data-kind=\"ranking\"] { border-left-color: #7acc7a; }\n+.event[data-kind=\"vote\"] { border-left-color: var(--link); }\n+.event time, .event-kind { color: var(--meta); font-family: var(--font-code); font-size: 10px; }\n+.event-kind { text-transform: uppercase; }\n+.event-message { color: var(--prose); font-family: var(--font-prose); }\n+\n+code {\n+  background: var(--g1);\n+  border: 2px solid;\n+  border-color: var(--lo) var(--hi) var(--hi) var(--lo);\n+  color: var(--code-fg);\n+  font-family: var(--font-code);\n+  font-size: 12px;\n+  padding: 1px 4px;\n+}\n+\n+@media (max-width: 520px) {\n+  .event { grid-template-columns: 72px 1fr; }\n+  .event-message { grid-column: 1 / -1; }\n+}\n+\"\"\"\n+\n+\n+def _watch_initial_state() -> dict:\n+    events = store.read()\n+    feed = []\n+    for event_ in events[-40:]:\n+        if isinstance(event_, GitDiscovery):\n+            feed.append({\n+                \"id\": f\"discovery-{event_.snapshot_id}\",\n+                \"timestamp_ms\": event_.timestamp_ms,\n+                \"kind\": \"discovery\",\n+                \"message\": (\n+                    f\"Epoch {event_.epoch}: observed {len(event_.observations)} commits; \"\n+                    f\"{len(event_.commits)} eligible\"\n+                ),\n+            })\n+        elif isinstance(event_, Emission):\n+            feed.append({\n+                \"id\": f\"emission-{event_.epoch}\",\n+                \"timestamp_ms\": event_.timestamp_ms,\n+                \"kind\": \"complete\",\n+                \"message\": (\n+                    f\"Epoch {event_.epoch}: emitted {event_.total_emitted} SLG; \"\n+                    f\"ranking {event_.ranking}\"\n+                ),\n+            })\n+    feed.extend(AUDIT_HISTORY)\n+    return {\n+        \"process\": dict(PROCESS_STATE),\n+        \"openrouter_configured\": bool((OPENROUTER_API_KEY or \"\").strip()),\n+        \"epoch\": current_epoch()[0],\n+        \"feed\": feed[-200:],\n+    }\n+\n+\n+_WATCH_JS = \"\"\"\n+const initial = __INITIAL__;\n+const feed = document.querySelector('#audit-feed');\n+const processStatus = document.querySelector('#process-status');\n+const connection = document.querySelector('#connection-status');\n+const fill = document.querySelector('#progress-fill');\n+const progressLabel = document.querySelector('#progress-label');\n+const play = document.querySelector('#play');\n+const pause = document.querySelector('#pause');\n+const seen = new Set();\n+let source = null;\n+\n+function setProgress(value) {\n+  const n = Math.max(0, Math.min(100, Number(value ?? 0)));\n+  fill.style.width = `${n}%`;\n+  progressLabel.textContent = `${Math.round(n)}%`;\n+  document.querySelector('.progress-shell').setAttribute('aria-valuenow', String(n));\n+}\n+\n+function addEvent(event) {\n+  const id = String(event.id);\n+  if (seen.has(id)) return;\n+  seen.add(id);\n+  const row = document.createElement('div');\n+  row.className = 'event';\n+  row.dataset.kind = event.kind || 'event';\n+  const when = document.createElement('time');\n+  when.dateTime = new Date(event.timestamp_ms).toISOString();\n+  when.textContent = new Date(event.timestamp_ms).toLocaleTimeString();\n+  const kind = document.createElement('span');\n+  kind.className = 'event-kind';\n+  kind.textContent = event.kind || 'event';\n+  const message = document.createElement('span');\n+  message.className = 'event-message';\n+  message.textContent = event.message;\n+  row.append(when, kind, message);\n+  feed.prepend(row);\n+  while (feed.children.length > 200) feed.lastElementChild.remove();\n+}\n+\n+function applyState(event) {\n+  processStatus.textContent = event.message || 'Waiting for the next epoch';\n+  setProgress(event.progress);\n+  if (event.kind !== 'connection') addEvent(event);\n+}\n+\n+function connect() {\n+  if (source) return;\n+  source = new EventSource('/sse');\n+  connection.classList.remove('warn');\n+  connection.classList.add('live');\n+  connection.querySelector('span:last-child').textContent = 'connecting';\n+  play.disabled = true;\n+  pause.disabled = false;\n+  source.onopen = () => {\n+    connection.querySelector('span:last-child').textContent = 'live';\n+  };\n+  source.addEventListener('audit', event => applyState(JSON.parse(event.data)));\n+  source.onerror = () => {\n+    connection.classList.remove('live');\n+    connection.classList.add('warn');\n+    connection.querySelector('span:last-child').textContent = 'reconnecting';\n+  };\n+}\n+\n+function disconnect() {\n+  if (source) source.close();\n+  source = null;\n+  connection.classList.remove('live');\n+  connection.classList.add('warn');\n+  connection.querySelector('span:last-child').textContent = 'paused locally';\n+  play.disabled = false;\n+  pause.disabled = true;\n+}\n+\n+play.addEventListener('click', connect);\n+pause.addEventListener('click', disconnect);\n+initial.feed.forEach(addEvent);\n+processStatus.textContent = initial.process.message;\n+setProgress(initial.process.progress);\n+connect();\n+\"\"\"\n+\n+\n+@app.get(\"/watch\")\n+async def watch():\n+    initial = json.dumps(\n+        _watch_initial_state(), separators=(\",\", \":\")\n+    ).replace(\"</\", \"<\\\\/\")\n+    script = _WATCH_JS.replace(\"__INITIAL__\", initial)\n+    key_ok = bool((OPENROUTER_API_KEY or \"\").strip())\n+    return HTMLResponse(render([\"html\",\n+        [\"head\",\n+            [\"meta\", {\"charset\": \"utf-8\"}],\n+            [\"meta\", {\"name\": \"viewport\", \"content\": \"width=device-width, initial-scale=1\"}],\n+            [\"title\", \"slug — live constitution\"],\n+            [\"style\", RawContent(_WATCH_CSS)],\n+        ],\n+        [\"body\", [\"main\",\n+            [\"div.eyebrow\", f\"epoch {current_epoch()[0]} · constitutional audit\"],\n+            [\"h1\", \"watch the process\"],\n+            [\"section.panel\",\n+                [\"div.status-row\",\n+                    [\"div#process-status\", PROCESS_STATE[\"message\"]],\n+                    [\"div#connection-status.badge\", [\"span.dot\"], [\"span\", \"connecting\"]],\n+                ],\n+                [\"div.progress-shell\", {\n+                    \"role\": \"progressbar\", \"aria-label\": \"Emission progress\",\n+                    \"aria-valuemin\": \"0\", \"aria-valuemax\": \"100\",\n+                    \"aria-valuenow\": str(PROCESS_STATE[\"progress\"]),\n+                },\n+                    [\"div#progress-fill\"],\n+                    [\"div#progress-label\", f\"{PROCESS_STATE['progress']}%\"],\n+                ],\n+                [\"div.controls\",\n+                    [\"button#play\", {\"type\": \"button\", \"disabled\": \"true\"}, \"▶ Play live feed\"],\n+                    [\"button#pause\", {\"type\": \"button\"}, \"Ⅱ Pause feed\"],\n+                    [\"span.note\", \"Pause stops local updates; the constitutional process continues.\"],\n+                ],\n+            ],\n+            [\"section.panel\",\n+                [\"div.status-row\",\n+                    [\"strong\", \"Council readiness\"],\n+                    [\"div.badge\" + (\".live\" if key_ok else \".warn\"),\n+                        [\"span.dot\"],\n+                        [\"span\", \"OpenRouter configured\" if key_ok else \"OpenRouter key missing\"],\n+                    ],\n+                ],\n+                [\"p.note\",\n+                    (\n+                        \"Pairwise council voting is ready.\"\n+                        if key_ok else\n+                        \"Single-contributor epochs can finalize, but contested rankings require OPENROUTER_API_KEY.\"\n+                    )\n+                ],\n+            ],\n+            [\"section.panel\",\n+                [\"div.feed-head\", [\"h2\", \"event feed\"], [\"a\", {\"href\": \"/sse\"}, \"raw SSE\"]],\n+                [\"div#audit-feed\"],\n+            ],\n+            [\"p\", [\"a\", {\"href\": \"/\"}, \"← constitution\"], \" · \",\n+                  [\"a\", {\"href\": \"/api/status\"}, \"status JSON\"], \" · \",\n+                  [\"a\", {\"href\": \"/api/ledger\"}, \"ledger\"]],\n+        ]],\n+        [\"script\", {\"type\": \"module\"}, RawContent(script)],\n+    ]))\n+\n+\n async def redeem(github_user: str, wallet_address: str):\n     await store.append(Redemption(\n         timestamp_ms=int(time.time() * 1000),\n@@ -1386,7 +1983,7 @@ async def index(request: Request):\n             [\"p\", \"Total supply is 1.0 SLUG ownership unit. FDV is 177,600 USDC. Initial LP seed is 1,331 USDC.\"],\n             [\"p\", [\"a\", {\"href\": \"/login\"}, \"Login with GitHub to check your emissions\"]],\n             [\"p\",\n-                [\"a\", {\"href\": \"/sse\"}, \"Watch emission process live\"], \" | \",\n+                [\"a\", {\"href\": \"/watch\"}, \"Watch emission process live\"], \" | \",\n                 [\"a\", {\"href\": \"/api/epoch\"}, \"Current epoch\"], \" | \",\n                 [\"a\", {\"href\": \"/api/ledger\"}, \"Full ledger\"], \" | \",\n                 [\"a\", {\"href\": \"/api/halvening\"}, \"Jubilee countdown\"],\n@@ -1414,7 +2011,7 @@ async def index(request: Request):\n         [\"p\",\n             [\"a\", {\"href\": \"/api/epoch\"}, \"Current epoch\"], \" | \",\n             [\"a\", {\"href\": \"/api/ledger\"}, \"Full ledger\"], \" | \",\n-            [\"a\", {\"href\": \"/sse\"}, \"Watch emission live\"],\n+            [\"a\", {\"href\": \"/watch\"}, \"Watch emission live\"],\n         ],\n     ])\n \ndiff --git a/fly.toml b/fly.toml\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..1b08c7090185b1f8a17884eb86254c1e8d16ad60\n--- /dev/null\n+++ b/fly.toml\n@@ -0,0 +1,35 @@\n+app = \"slug-constitution\"\n+primary_region = \"ord\"\n+\n+[build]\n+  dockerfile = \"Dockerfile\"\n+\n+[env]\n+  GENESIS_MS = \"1775364391260\"\n+  JSONL_PATH = \"/data/ledger.jsonl\"\n+  GIT_MIRROR_DIR = \"/data/git\"\n+  PORT = \"8080\"\n+\n+[http_service]\n+  internal_port = 8080\n+  force_https = true\n+  auto_stop_machines = \"off\"\n+  auto_start_machines = true\n+  min_machines_running = 1\n+  processes = [\"app\"]\n+\n+  [[http_service.checks]]\n+    interval = \"30s\"\n+    timeout = \"10s\"\n+    grace_period = \"30s\"\n+    method = \"GET\"\n+    path = \"/api/epoch\"\n+\n+[[mounts]]\n+  source = \"slug_data\"\n+  destination = \"/data\"\n+\n+[[vm]]\n+  memory = \"2gb\"\n+  cpu_kind = \"shared\"\n+  cpus = 1\ndiff --git a/tests/integration.clj b/tests/integration.clj\nindex 0d34e3b237b4037a28f5e99350e8d447455665de..06b9715e63966d14311b159cbc7058952bff2fbc 100644\n--- a/tests/integration.clj\n+++ b/tests/integration.clj\n@@ -468,14 +468,29 @@\n         (assert! (= 1 (count (:history contrib-resp)))   \"alice has 1 emission in history\")\n         (assert! (pos? (parse-double (:total_earned contrib-resp))) \"total_earned > 0\")\n \n-        ;; 9. SSE connects and sends initial event\n+        ;; 9. watch UI exposes progress, controls, readiness, and live SSE\n+        (println \"\\nchecking /watch UI…\")\n+        (bind watch-html (slurp (str base-url \"/watch\")))\n+        (assert! (str/includes? watch-html \"role=\\\"progressbar\\\"\")\n+                 \"watch page has progress bar\")\n+        (assert! (str/includes? watch-html \"id=\\\"play\\\"\")\n+                 \"watch page has play control\")\n+        (assert! (str/includes? watch-html \"id=\\\"pause\\\"\")\n+                 \"watch page has pause control\")\n+        (assert! (str/includes? watch-html \"OpenRouter configured\")\n+                 \"watch page reports council readiness\")\n+        (bind status-resp (get-json base-url \"/api/status\"))\n+        (assert! (true? (:openrouter_configured status-resp))\n+                 \"status API reports OpenRouter configuration\")\n+\n+        ;; 10. SSE connects and sends initial event\n         (println \"\\nchecking /sse initial event…\")\n         (bind sse-events (read-sse-events (str base-url \"/sse\") 1 5000))\n         (assert! (= 1 (count sse-events))             \"received 1 SSE event\")\n         (assert! (not (str/blank? (first sse-events)))\n                  \"initial SSE event contains executable audit data\")\n \n-        ;; 10. POST /test/emit — full ranking pipeline hits mocks\n+        ;; 11. POST /test/emit — full ranking pipeline hits mocks\n         (println \"\\ntriggering /test/emit (epoch 1)…\")\n         (bind emit-resp (post-json! base-url \"/test/emit\"))\n         (assert! (= \"emission\" (:type emit-resp))     \"emit response type is emission\")\n@@ -503,7 +518,7 @@\n         (bind rank-after (get-json base-url \"/api/ranking\"))\n         (assert! (= 1 (:epoch rank-after))           \"latest ranking is epoch 1\")\n \n-        ;; 11. kill and restart — prove replay determinism\n+        ;; 12. kill and restart — prove replay determinism\n         (println \"\\nkilling server for replay test…\")\n         (.destroyForcibly (:proc server))\n         (deref server)\ndiff --git a/tests/test_git_discovery.py b/tests/test_git_discovery.py\nindex 0dd31bc42a19bc8c59842dc61f193c595c474659..5a9e167e16ad2ffb25988af85820f6f19e8910cd 100644\n--- a/tests/test_git_discovery.py\n+++ b/tests/test_git_discovery.py\n@@ -393,7 +393,9 @@ def test_empty_epoch_records_zero_emission_without_burning_pool(\n     monkeypatch.setattr(c, \"store\", c.JsonlStore(discovery_config / \"ledger.jsonl\"))\n \n     async def discover(_epoch, _boundary):\n-        return SimpleNamespace(commits=[], snapshot_id=\"empty-snapshot\")\n+        return SimpleNamespace(\n+            observations=[], commits=[], snapshot_id=\"empty-snapshot\"\n+        )\n \n     async def rank(_commits):\n         return {}, []\n@@ -412,7 +414,11 @@ def test_emission_distribution_sums_exactly_to_total(\n     monkeypatch.setattr(c, \"store\", c.JsonlStore(discovery_config / \"ledger.jsonl\"))\n \n     async def discover(_epoch, _boundary):\n-        return SimpleNamespace(commits=[{\"x\": 1}], snapshot_id=\"ranked-snapshot\")\n+        return SimpleNamespace(\n+            observations=[{\"x\": 1}],\n+            commits=[{\"x\": 1}],\n+            snapshot_id=\"ranked-snapshot\",\n+        )\n \n     async def rank(_commits):\n         return {\n@@ -454,6 +460,7 @@ def test_any_council_failure_aborts_ranking(monkeypatch):\n \n     monkeypatch.setattr(c, \"fetch_top_models\", models)\n     monkeypatch.setattr(c, \"llm_pairwise_compare\", compare)\n+    monkeypatch.setattr(c, \"OPENROUTER_API_KEY\", \"test-key\")\n     commits = [\n         {\n             \"contributor\": contributor,\n@@ -465,3 +472,54 @@ def test_any_council_failure_aborts_ranking(monkeypatch):\n     ]\n     with pytest.raises(RuntimeError, match=\"council model failed\"):\n         asyncio.run(c.rank_commits(commits))\n+\n+\n+def test_contested_ranking_requires_openrouter_key(monkeypatch):\n+    monkeypatch.setattr(c, \"OPENROUTER_API_KEY\", \"\")\n+    commits = [\n+        {\n+            \"contributor\": contributor,\n+            \"oid\": \"sha1:\" + char * 40,\n+            \"message\": contributor,\n+            \"patch\": \"patch\",\n+        }\n+        for contributor, char in [(\"alice\", \"a\"), (\"bob\", \"b\")]\n+    ]\n+    with pytest.raises(RuntimeError, match=\"OPENROUTER_API_KEY\"):\n+        asyncio.run(c.rank_commits(commits))\n+\n+\n+def test_watch_page_has_live_controls_progress_and_key_warning(\n+    discovery_config, monkeypatch\n+):\n+    monkeypatch.setattr(c, \"store\", c.JsonlStore(discovery_config / \"ledger.jsonl\"))\n+    monkeypatch.setattr(c, \"OPENROUTER_API_KEY\", \"\")\n+    monkeypatch.setattr(c, \"current_epoch\", lambda: (3, 0, 1))\n+    response = asyncio.run(c.watch())\n+    html = response.body.decode()\n+    assert 'role=\"progressbar\"' in html\n+    assert 'id=\"play\"' in html\n+    assert 'id=\"pause\"' in html\n+    assert \"new EventSource('/sse')\" in html\n+    assert \"OpenRouter key missing\" in html\n+\n+\n+def test_audit_events_are_json_sse_and_update_process_state(monkeypatch):\n+    clients = []\n+    history = []\n+    monkeypatch.setattr(c, \"SSE_CLIENTS\", clients)\n+    monkeypatch.setattr(c, \"AUDIT_HISTORY\", history)\n+    queue = asyncio.Queue()\n+    clients.append(queue)\n+\n+    async def emit():\n+        event = await c.broadcast_audit(\n+            \"progress\", \"halfway\", progress=50, phase=\"ranking\"\n+        )\n+        return event, await queue.get()\n+\n+    event, wire = asyncio.run(emit())\n+    assert event[\"progress\"] == 50\n+    assert event[\"phase\"] == \"ranking\"\n+    assert wire.startswith(\"event: audit\\ndata: {\")\n+    assert '\"message\":\"halfway\"' in wire\n\n\nSide B — contributor: tommy-mor\nSide B — commit message:\n[b9476669] Remove browser sentinel delegates so multi-user votes work.\n\nShared WEB_BROWSER_AGENT bound on first vote and blocked every later human; browser posts now use no delegate, matching forum UI.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\nSide B — unified diff (full patch):\ndiff --git a/cli/src/main.rs b/cli/src/main.rs\nindex c4f1494df3aedbd8b883aea6249579aa8336abfe..af3e4fee876910a44f6f872b24821bc541a23e20 100644\n--- a/cli/src/main.rs\n+++ b/cli/src/main.rs\n@@ -1741,8 +1741,8 @@ async fn run() -> Result<()> {\n                     tokio::time::sleep(std::time::Duration::from_millis(poll_interval_ms)).await;\n                     let poll: PendingSessionPollResponse =\n                         expect_json(client.get(&poll_url).send().await?).await?;\n-                    if !poll.agent.trim().is_empty() {\n-                        agent_out = Some(poll.agent.clone());\n+                    if let Some(a) = poll.agent.as_deref().map(str::trim).filter(|s| !s.is_empty()) {\n+                        agent_out = Some(a.to_string());\n                     }\n                     if poll.complete {\n                         token_out = poll.token;\ndiff --git a/server/src/api/auth.rs b/server/src/api/auth.rs\nindex 50dc6af908412b16343829eae25154ebf4e19fca..01c02f50c19bcd62c7f1717f9b927f203c3164d0 100644\n--- a/server/src/api/auth.rs\n+++ b/server/src/api/auth.rs\n@@ -29,18 +29,6 @@ use crate::{\n     write_cmd::WriteCmd,\n };\n \n-/// Delegate id for browser users who land via `/join/inv_…` (no CLI agent).\n-const INVITE_BROWSER_AGENT: &str = \"00000000-0000-0000-0000-000000000000:invite:web/join\";\n-\n-/// Agent id for `/login` browser OAuth (no CLI); must pass [`parse_agent`].\n-pub const WEB_BROWSER_AGENT: &str = \"00000000-0000-0000-0000-000000000001:social:web/browser\";\n-\n-/// True for well-known browser / human-form sentinel delegates (not real AI agents).\n-/// HTML attribution should show the human username for these, not `@@uuid:rig:…`.\n-pub fn is_browser_sentinel_delegate(agent: &str) -> bool {\n-    agent == WEB_BROWSER_AGENT || agent == INVITE_BROWSER_AGENT\n-}\n-\n /// HttpOnly cookie storing the same `slug_*` bearer string the CLI uses.\n pub const SLUG_SESSION_COOKIE: &str = \"slug_session\";\n \n@@ -288,7 +276,7 @@ pub async fn get_join_invite(\n     let session = format!(\"p_{}\", uuid::Uuid::new_v4().simple());\n     let redirect_next = safe_local_redirect(q.next.as_deref().or(q.redirect.as_deref()));\n     let s = PendingSession {\n-        agent: INVITE_BROWSER_AGENT.to_string(),\n+        agent: None,\n         created_ts: now_ms(),\n         provider: None,\n         provider_id: None,\n@@ -555,7 +543,7 @@ pub async fn post_choose_username(\n     };\n \n     let sessions = pending_sessions(&state);\n-    let (provider, provider_id, agent) = {\n+    let (provider, provider_id) = {\n         let sessions_read = sessions.read().await;\n         let Some(s) = sessions_read.get(&form.session) else {\n             return api_error(StatusCode::NOT_FOUND, \"unknown session\", None).into_response();\n@@ -566,14 +554,9 @@ pub async fn post_choose_username(\n         let Some(provider_id) = s.provider_id.clone() else {\n             return js_form_error_fragment(&form.session, \"oauth not completed\").into_response();\n         };\n-        (provider, provider_id, s.agent.clone())\n+        (provider, provider_id)\n     };\n \n-    if let Err(msg) = parse_agent(&agent) {\n-        return js_form_error_fragment(&form.session, &format!(\"invalid agent format — {msg}\"))\n-            .into_response();\n-    }\n-\n     let redeem_invite = {\n         let sessions_read = sessions.read().await;\n         sessions_read\n@@ -643,7 +626,8 @@ pub async fn get_web_login(\n     let redirect_next = safe_local_redirect(q.next.as_deref().or(q.redirect.as_deref()))\n         .or_else(|| Some(\"/\".to_string()));\n     let s = PendingSession {\n-        agent: WEB_BROWSER_AGENT.to_string(),\n+        // Humans sign in via the website with no AI delegate.\n+        agent: None,\n         created_ts: now_ms(),\n         provider: None,\n         provider_id: None,\n@@ -704,7 +688,7 @@ pub async fn post_pending_session(\n     );\n     let poll_url = format!(\"/api/v0/pending-session/{session}\");\n     let s = PendingSession {\n-        agent: agent_naked,\n+        agent: Some(agent_naked),\n         created_ts: now_ms(),\n         provider: None,\n         provider_id: None,\ndiff --git a/server/src/api/mod.rs b/server/src/api/mod.rs\nindex fdff6db0472b36cd7870a4be68574023e0daf120..920e967b47852ea82fa61b84c457ae3582dd9800 100644\n--- a/server/src/api/mod.rs\n+++ b/server/src/api/mod.rs\n@@ -18,13 +18,11 @@ pub use auth::{\n     get_choose_username,\n     get_web_login,\n     get_logout,\n-    is_browser_sentinel_delegate,\n     optional_principal,\n     resolve_web_session,\n     session_cookie_header_value,\n     WebSession,\n     SLUG_SESSION_COOKIE,\n-    WEB_BROWSER_AGENT,\n };\n \n pub use helpers::{\ndiff --git a/server/src/api/ui_html.rs b/server/src/api/ui_html.rs\nindex 611956d0a46062b49ce350be176e4be139312ff0..6e56c039a184953cd1d0593c34cf4d5abe41f2a3 100644\n--- a/server/src/api/ui_html.rs\n+++ b/server/src/api/ui_html.rs\n@@ -277,7 +277,7 @@ async fn dispatch_ui_action(\n                 &session.bearer,\n                 room.clone(),\n                 thread_tag.clone(),\n-                Some(crate::api::auth::WEB_BROWSER_AGENT.to_string()),\n+                None,\n                 text,\n             )\n             .await\ndiff --git a/server/src/html/mod.rs b/server/src/html/mod.rs\nindex 645d54f2e117ba901e02ed958ada6ff69a78ae34..03ad762e88709c77b9d5dd130c48bc96226616a1 100644\n--- a/server/src/html/mod.rs\n+++ b/server/src/html/mod.rs\n@@ -560,27 +560,28 @@ fn identity_color_css(seed: &str) -> String {\n     format!(\"hsl({hue}, 62%, 66%)\")\n }\n \n-/// Seed for author color: real AI → delegate uuid; human/sentinel → principal username.\n+/// Seed for author color: AI → delegate uuid; human (no delegate) → principal username.\n fn authorship_color_seed<'a>(principal: &'a str, delegate: &'a Option<String>) -> &'a str {\n     match delegate {\n-        Some(d) if !crate::api::is_browser_sentinel_delegate(d) => {\n-            d.split(':').next().filter(|s| !s.is_empty()).unwrap_or(d.as_str())\n-        }\n-        _ => principal,\n+        Some(d) => d\n+            .split(':')\n+            .next()\n+            .filter(|s| !s.is_empty())\n+            .unwrap_or(d.as_str()),\n+        None => principal,\n     }\n }\n \n-/// Prefer the AI delegate in attribution; fall back to the human username when there is no\n-/// delegate or the delegate is a browser/human-form sentinel.\n+/// Prefer the AI delegate in attribution; humans post with no delegate and show `@username`.\n pub(crate) fn authorship_attr(principal: &str, delegate: &Option<String>) -> AuthorshipAttr {\n     let color = identity_color_css(authorship_color_seed(principal, delegate));\n     match delegate {\n-        Some(d) if !crate::api::is_browser_sentinel_delegate(d) => AuthorshipAttr {\n+        Some(d) => AuthorshipAttr {\n             label: format!(\"@@{}\", actor_label(d)),\n             author_title: Some(format!(\"@{principal}\")),\n             color,\n         },\n-        _ => AuthorshipAttr {\n+        None => AuthorshipAttr {\n             label: format!(\"@{principal}\"),\n             author_title: None,\n             color,\n@@ -933,7 +934,6 @@ pub(super) fn recency_class(now_ms: i64, ts_ms: i64) -> &'static str {\n #[cfg(test)]\n mod authorship_tests {\n     use super::*;\n-    use crate::api::WEB_BROWSER_AGENT;\n \n     #[test]\n     fn human_or_missing_delegate_shows_username() {\n@@ -943,15 +943,6 @@ mod authorship_tests {\n         assert!(a.color.starts_with(\"hsl(\"));\n     }\n \n-    #[test]\n-    fn browser_sentinel_delegate_shows_username() {\n-        let d = Some(WEB_BROWSER_AGENT.to_string());\n-        let a = authorship_attr(\"alice\", &d);\n-        assert_eq!(a.label, \"@alice\");\n-        assert_eq!(a.author_title, None);\n-        assert_eq!(authorship_address(\"alice\", &d), \"@alice\");\n-    }\n-\n     #[test]\n     fn real_ai_delegate_shows_short_agent_with_username_hover() {\n         let d = Some(\ndiff --git a/server/src/state.rs b/server/src/state.rs\nindex 648ab5304764a329fcabbbbcd3782b94e3e005a8..8ea84dcf9b1df8f8037e913cdd94e5908e6d5d55 100644\n--- a/server/src/state.rs\n+++ b/server/src/state.rs\n@@ -21,7 +21,8 @@ pub struct InviteState {\n \n #[derive(Debug, Clone)]\n pub struct PendingSession {\n-    pub agent: String,\n+    /// CLI `identity start` delegate (`uuid:rig:model`). `None` for browser `/login` and `/join`.\n+    pub agent: Option<String>,\n     pub created_ts: i64,\n     pub provider: Option<String>,\n     pub provider_id: Option<String>,\ndiff --git a/server/tests/integration_ui.rs b/server/tests/integration_ui.rs\nindex 6b1475b773106a2dd3f326475c9fb4cc727f6b4b..714563a8b330e3917d95a54ae29b4de143e3b8a4 100644\n--- a/server/tests/integration_ui.rs\n+++ b/server/tests/integration_ui.rs\n@@ -418,6 +418,99 @@ async fn test_web_login_carries_vote_pair_next_into_pending_session() {\n     let sessions = state.pending_sessions.read().await;\n     let pending = sessions.get(&session).expect(\"pending session\");\n     assert_eq!(pending.redirect_next.as_deref(), Some(next));\n+    assert_eq!(\n+        pending.agent, None,\n+        \"browser /login must not invent a sentinel delegate\"\n+    );\n+}\n+\n+#[tokio::test]\n+async fn test_vote_compare_two_users_both_succeed_without_delegate() {\n+    let (addr, _tmp, _log, state, _handle) = create_test_server_with_state().await;\n+    let client = reqwest::Client::new();\n+    let alice = test_bearer();\n+    let bob = seed_test_identity(&state, \"bob\", \"bobtok\", \"bobsecret\").await;\n+\n+    // Define items first (votes require existing item bodies).\n+    let seed = ui_post_ingest_rpc(\n+        \"public\",\n+        \"multi-vote\",\n+        \"~/multi-a {alpha}\\n~/multi-b {beta}\\n\",\n+    );\n+    let seed_resp = client\n+        .post(format!(\"http://{addr}/ui\"))\n+        .header(\"Authorization\", format!(\"Bearer {alice}\"))\n+        .form(&[(\"__rpc__\", seed.as_str())])\n+        .send()\n+        .await\n+        .unwrap();\n+    assert_eq!(seed_resp.status(), reqwest::StatusCode::OK);\n+    let seed_js = seed_resp.text().await.unwrap();\n+    assert!(\n+        !seed_js.contains(\"auth-error\"),\n+        \"item seed must succeed, got: {seed_js}\"\n+    );\n+\n+    for (bearer, left, right, explanation) in [\n+        (&alice, \"3\", \"1\", \"alice prefers a\"),\n+        (&bob, \"1\", \"3\", \"bob prefers b\"),\n+    ] {\n+        let rpc = ui_vote_compare_post_rpc(\n+            \"public\",\n+            \"multi-vote\",\n+            \"~/multi-a\",\n+            \"~/multi-b\",\n+            left,\n+            right,\n+            explanation,\n+        );\n+        let resp = client\n+            .post(format!(\"http://{addr}/ui\"))\n+            .header(\"Authorization\", format!(\"Bearer {bearer}\"))\n+            .form(&[(\"__rpc__\", rpc.as_str())])\n+            .send()\n+            .await\n+            .unwrap();\n+        assert_eq!(resp.status(), reqwest::StatusCode::OK);\n+        let js = resp.text().await.unwrap();\n+        assert!(\n+            !js.contains(\"delegate already bound\"),\n+            \"human vote must not hit shared-sentinel AgentBound ({explanation}), got: {js}\"\n+        );\n+        assert!(\n+            !js.contains(\"auth-error\"),\n+            \"human vote must succeed ({explanation}), got: {js}\"\n+        );\n+        assert!(\n+            js.contains(\"vote-edge-history-region\"),\n+            \"vote should morph edge history ({explanation}), got: {js}\"\n+        );\n+    }\n+\n+    let reduced = state.reduced.read().await;\n+    let human_votes: Vec<_> = reduced\n+        .ingests_ordered\n+        .iter()\n+        .filter_map(|id| reduced.ingests_by_id.get(id))\n+        .filter(|ing| ing.raw.contains(\"prefers\"))\n+        .collect();\n+    assert_eq!(human_votes.len(), 2, \"expected two vote ingests\");\n+    let mut principals: Vec<&str> = human_votes.iter().map(|i| i.principal.as_str()).collect();\n+    principals.sort();\n+    assert_eq!(principals, [\"bob\", \"testuser\"]);\n+    for ing in &human_votes {\n+        assert!(\n+            ing.delegate.is_none(),\n+            \"browser votes must have no delegate, principal={} delegate={:?}\",\n+            ing.principal,\n+            ing.delegate\n+        );\n+    }\n+    assert!(\n+        reduced.agent_bindings.is_empty(),\n+        \"human votes must not create AgentBound entries: {:?}\",\n+        reduced.agent_bindings\n+    );\n }\n \n #[tokio::test]\ndiff --git a/server/tests/support/mod.rs b/server/tests/support/mod.rs\nindex a4320e991763617c1a760efad4b621977e2b74d0..67650520ea8f9f144bfe904347c40329d5db37e8 100644\n--- a/server/tests/support/mod.rs\n+++ b/server/tests/support/mod.rs\n@@ -72,17 +72,14 @@ pub async fn rpc_batch(\n     response.json().await.unwrap()\n }\n \n-pub async fn seed_test_token(state: &AppState) {\n-    seed_test_identity(state, \"testuser\", \"testtok\", \"secret\").await;\n-}\n-\n-/// Add a distinct principal and bearer to a running integration-test server.\n+/// Seed a user + bearer into reducer state (not appended to the event log).\n+/// Returns the `slug_<token_id>_<secret>` bearer string.\n pub async fn seed_test_identity(\n     state: &AppState,\n     username: &str,\n     token_id: &str,\n     secret: &str,\n-) {\n+) -> String {\n     let registered = Event::UserRegistered(UserRegistered {\n         ts: 0,\n         username: username.to_string(),\n@@ -102,6 +99,11 @@ pub async fn seed_test_identity(\n     let mut r = state.reduced.write().await;\n     r.apply_event(registered);\n     r.apply_event(ev);\n+    format!(\"slug_{token_id}_{secret}\")\n+}\n+\n+pub async fn seed_test_token(state: &AppState) {\n+    let _ = seed_test_identity(state, \"testuser\", \"testtok\", \"secret\").await;\n }\n \n pub async fn create_test_server_with_state() -> (\ndiff --git a/test/oauth.clj b/test/oauth.clj\nindex 3cbf496005e906ad6c579d44ac8c4055ee60d063..6911ac34a55707acda9f9ce091c079964649a252 100644\n--- a/test/oauth.clj\n+++ b/test/oauth.clj\n@@ -186,8 +186,9 @@\n               (:token poll-json))))))))\n \n (defn fetch-bearer-token!\n-  \"Simulate browser OAuth + username choice; returns `slug_…` bearer token.\n-   Ingest `--delegate` must match this agent string for `AgentBound` on first write.\"\n+  \"Simulate CLI identity OAuth + username choice; returns `slug_…` bearer token.\n+   Pass `:agent` (default local/dev) when the test will CLI-ingest with `--delegate`\n+   so first write can `AgentBound`. Browser UI posts use no delegate.\"\n   [base-url & {:keys [username agent] :or {username \"intuser\" agent default-agent}}]\n   (let [token (complete-registration! base-url :username username :agent agent)]\n     (when-not (str/starts-with? token \"slug_\")\ndiff --git a/types/src/lib.rs b/types/src/lib.rs\nindex cd6f94c60a4e1c3bfbce13bc0404b803f5f57c6d..4d05466c19a2f15f7d600e1d4a206b39984fabc4 100644\n--- a/types/src/lib.rs\n+++ b/types/src/lib.rs\n@@ -538,7 +538,9 @@ pub struct PendingSessionStartResponse {\n pub struct PendingSessionPollResponse {\n     pub ok: bool,\n     pub complete: bool,\n-    pub agent: String,\n+    /// Present for CLI identity sessions; omitted for browser `/login` / `/join` (no delegate).\n+    #[serde(default, skip_serializing_if = \"Option::is_none\")]\n+    pub agent: Option<String>,\n     #[serde(skip_serializing_if = \"Option::is_none\")]\n     pub user: Option<String>,\n     #[serde(skip_serializing_if = \"Option::is_none\")]\n","role":"user"}],"model":"~x-ai/grok-latest"}