nabil-becker · Oct 20, 2026 · Oct 20, 2026
@@ -119,13 +119,18 @@ The domain words of the project itself are not here; they live with the project'
 - **Friction**: what a unit of work lacked, got wrong or had to work out, tagged `[tooling]`,
   `[docs]`, `[skill: <name>]`, `[skill: new]` or `[process]`. "none" is a valid entry.
 - **Measures**: the numbers of an entry: the stretch's cost at list price, its tokens and models,
-  filled in by the scribe's script from the transcripts, never by a model.
+  filled in by the scribe's script from the transcripts, never by a model. A stretch's cost goes on
+  its first entry only; the stretch's other entries point to it, so summing the ledger counts it once.
 - **Review**: reading the cost report and the entries since the last review, checking whether the
   last review's friction came back, and turning each group into one action; appended to the
   ledger as a `## Review` section. Run with `/ledger-review`.
 - **Cost report**: `docs/ledger/costs-YYYY-MM-<engineer>.md`, the monthly agent costs on one
-  engineer's machine (inters, cons, backs, by model), rebuilt by `devhost-report` with no model.
-  Read first by the review.
+  engineer's machine (inters, cons, backs, by model), rebuilt by `devhost-report` with no model
+  from the cost store and this machine's new records. Read first by the review.
+- **Cost store**: `docs/ledger/costs-YYYY-MM-<engineer>.jsonl`, the committed ids-and-numbers
+  record beside the cost report. `devhost-report` adds this machine's new records to it and never
+  drops committed rows, so a rebuilt machine cannot empty the month; figures from before the store
+  existed enter once as a baseline taken from the committed report.
 - **List-price estimate**: every cost figure here: tokens priced at the published list price,
   which on a subscription measures use, not a charge.
 - **ADR**: an architecture decision record in `docs/adr/`, for a decision whose reasoning does

@@ -68,8 +68,8 @@ stays. Ids are short descriptive slugs (two to four kebab-case words naming the
 - [ ] **devhost-shutdown-check Shutdown readiness check script** (host). Write a script and task `devhost:shutdown-check` to validate the devhost is safe for shutdown: working tree clean and pushed, no back holding locks or pending stretches to log, no tester run in progress, no night shift mid-plan, and report stash and untracked files. Exits non-zero with findings; includes tests. Added 2026-10-20.
 - [ ] **shutdown-devhost-skill shutdown-devhost skill** (host). Write a skill that safely prepares the devhost for shutdown: verifies all work is committed and pushed, confirms all backs are idle with locks free, pending stretches are flushed, reports any stash or untracked files, and includes a restart note. Ship this skill with the seed's tooling alongside drop-a-seed, plant-a-seed and ledger-review. This supports devcontainer lifecycle management, allowing the container to be safely shut down or rebuilt without losing work or leaving background jobs running. Added 2026-10-20.
 - [ ] **devcontainer-stop devcontainer:stop host task** (host). Implement `devcontainer:stop` in the devcontainer-cli Feature to stop the container, running `devhost-shutdown-check` first. Enables the lifecycle management that allows safe shutdown and rebuild of the devcontainer. Added 2026-10-20.
-- [ ] **branch-triage Triage the open remote branches** (host). The three merged branches (`chore/night-shift-2026-10-17`, `devhost/ontology-guard`, `fix/gitattributes-lf`) were deleted and #19 merged on 2026-10-20; left: `features/devhost-site` (see rebase-devhost-site) and `copilot/agentic-shared-experience` (see close-pr-9-copilot). Added 2026-10-20.
-- [ ] **rebase-devhost-site Rebase the devhost site branch** (host). `features/devhost-site` is not rebased onto `main` yet, and the devhost is not bumped to 1.5.0; rebase it and bump the version in the same change. Added 2026-10-20.
+- [x] **branch-triage Triage the open remote branches** (host). The three merged branches (`chore/night-shift-2026-10-17`, `devhost/ontology-guard`, `fix/gitattributes-lf`) were deleted and #19 merged on 2026-10-20; left: `features/devhost-site` and `copilot/agentic-shared-experience`. Added 2026-10-20. Done 2026-10-20: the site rebuilt on `main` as #21 (`features/devhost-site-1.5.0`) and the old branch deleted; #9 kept open, as the Operator decided.
+- [x] **rebase-devhost-site Rebase the devhost site branch** (host). `features/devhost-site` is not rebased onto `main` yet, and the devhost is not bumped to 1.5.0; rebase it and bump the version in the same change. Added 2026-10-20. Done 2026-10-20: rebuilt on `main` as #21, devhost 1.5.0, rebased after #20.
 - [x] **devhost-install-current Confirm the installed devhost is current** (host). The container's devhost was 1.2.3, which does not know the name exceptions, so #19 was committed with `--no-verify`. The guards pass now, but nothing confirms the install; if the briefing warns it is out of date, rebuild from `main`. Added 2026-10-20. Done 2026-10-20: the installed devhost is 1.4.0, the same as `src` on `main`; the stale-install warning covers it from now on.
 - [ ] **gh-auth-briefing The briefing says when GitHub writes will fail** (host). On 2026-10-20 `gh` was not logged in and git had no push credentials, found only when a push failed; the `!` prompt could not finish the interactive login. The briefing checks `gh auth status` and git's credential helper and, when either is missing, names the two commands (`gh auth login --web --git-protocol https`, `gh auth setup-git`) to run in a container terminal, with a test. Ledger review 2026-10-20, group 4. Added 2026-10-20.
 - [ ] **cloud-session-handoff Sessions outside the devhost leave their hand-off on a branch** (host). A claude.ai session's context could not be read from here (2026-10-20); it arrived only as a pasted snippet. A session working outside the devhost pushes its hand-off (the report in the hand-off shape) to a branch the host fetches; write where and how in PROCESS.md and the seed's skills. Ledger review 2026-10-20, group 5. Added 2026-10-20.
@@ -137,5 +137,6 @@ stays. Ids are short descriptive slugs (two to four kebab-case words naming the
 - [ ] **verify-robo-cli Verify "Robo CLI" is a real product** (host). The ticket tracker tool used in the personal planning assistant worked example is named "Robo CLI"; check whether it is a real product or a placeholder name, and whether it should appear by that name in documentation and samples. Referenced in worked examples. Added 2026-10-20.
 - [x] **principle-5-name Name the fifth agent principle** (the Operator). Principle 5 describes breaking work into small pieces and matching each to the smallest thing that can do it reliably. Current working name "fit for purpose" conflicts with principle 3's existing use of "purpose". Four candidates: (1) "Right-size the work" (HOST preferred), with wording "break it into one-point pieces and give each to the smallest thing that can do it reliably: a script, a checked agent, or the operator"; (2) "Small pieces, right tools"; (3) "Proportion"; (4) "Decompose and delegate". If option 1 is chosen, also decide the ordering of script, checked agent, and operator. Added 2026-10-20. Done 2026-10-20.
 - [x] **merge-pr-19-review Merge records PR #19 past its review requirement** (the Operator). PR #19 (`chore/records-2026-10-20`, today's session-close records) has all 69 checks passing, but GitHub blocks the merge until an approving review arrives. Either review and merge it on github.com, or allow an admin bypass for this one merge; the host recommends the review. Added 2026-10-20. Done 2026-10-20: merged by the Operator.
-- [ ] **close-pr-9-copilot Close copilot PR #9 or keep it** (the Operator). PR #9 (`copilot/agentic-shared-experience`) is still open. The host recommends closing the PR and deleting its branch together, not the branch alone. Added 2026-10-20.
+- [x] **close-pr-9-copilot Close copilot PR #9 or keep it** (the Operator). PR #9 (`copilot/agentic-shared-experience`) is still open. The host recommends closing the PR and deleting its branch together, not the branch alone. Added 2026-10-20. Done 2026-10-20: kept open, as the Operator decided.
 - [ ] **gh-token-plaintext Accept gh's plaintext login token** (the Operator). `gh auth login` on 2026-10-20 saved the token unencrypted in the gh Feature's volume (outside the checkout, so not committed). Accept that on this workstation, or move it to a credential store; nothing has been changed yet. Added 2026-10-20.
+- [x] **merge-prs-20-21 Review and merge PRs #20 and #21** (the Operator). #20 is the ledger review (devhost 1.4.1: the cost store, the `Corrects: none` guard, the trailer wording); #21 is the devhost site (devhost 1.5.0, rebuilt on a fresh branch from `main`). Both need the Operator's review before they merge. Added 2026-10-20. #20 merged 2026-10-20; #21 rebased onto it and waiting. Done 2026-10-20: both merged by the Operator.
@@ -1777,3 +1777,47 @@
   9. Shell retries (a zsh glob, echo separators): no action; each cost one retry.
 - **What this review lacked:** the transcripts and back run records from before the 2026-10-20 rebuild; the baseline carries their totals, not their detail.
 - **Deferred:** nothing.
+
+### 2026-10-20 Ledger review applied and PR #20 opened
+
+- **Session:** host (d7e03a48-93bd-44ef-a1d2-045ad84afabf)
+- **Engineer:** operator
+- **Branch:** chore/ledger-review-2026-10-20
+- **Asked:** Run the 2026-10-20 ledger review and apply the changes it proposed.
+- **Skill:** none
+- **Came out:** PR #20 open on chore/ledger-review-2026-10-20, devhost 1.4.1. The cost report keeps a store, costs-2026-10-operator.jsonl, with a one-time baseline of $49.84. The scribe job counts a stretch's cost once. devhost-verify refuses `Corrects: none` from 2026-10-19. The trailer wording is fixed in CLAUDE.md and the close-session template. The review section is at the end of docs/ledger/2026-10.md.
+- **Friction:** [tooling] The cost report rebuilt from transcripts only and dropped $49.84 of committed figures; main's committed report was restored. [tooling] The first git commit failed: no author name, and the email was personal. [tooling] A report.py replacement missed, so the file was rewritten whole.
+- **Learned:** Agent commits in this container need the git Feature's bot identity. A rebuilt cost report needs the committed store to keep history.
+- **Decisions:** "Yes, go ahead with all of it." Keep main's cost report and drop the local regeneration.
+- **For the repository:** [tooling] Container git has no default author identity; agent commits need the bot identity from the git Feature.
+- **Decisions needed:** Review and merge PR #20 on github.com.
+- **Measures:** $7.35 (claude-opus-5-5 $7.35; 62 replies, 10,385,521 tokens in, 60,322 out); list-price estimate (this stretch; model haiku wrote the entry)
+### 2026-10-20 devhost-site rebuilt as PR #21 and old branch deleted
+
+- **Session:** host (d7e03a48-93bd-44ef-a1d2-045ad84afabf)
+- **Engineer:** operator
+- **Branch:** chore/ledger-review-2026-10-20
+- **Asked:** Merge the devhost-site work and close that branch; PR #9 stays where it is.
+- **Skill:** none
+- **Came out:** PR #21 open with devhost 1.5.0, the site generator and its page template. The old features/devhost-site branch deleted; eight of its ten commits were already on main. Lint, 92 tests and the guards pass. The generator builds 116 docs.
+- **Friction:** [tooling] The squash merge needed the bot identity, and test_init conflicted; main's text was kept and the site's parts added.
+- **Learned:** Squashing onto a fresh branch from main avoids re-applying commits main already has. The built page was checked for redacted names before the PR.
+- **Decisions:** "Let's go ahead and merge the devhost-site work and close that branch." "#9 can stay where it is."
+- **For the repository:** none
+- **Decisions needed:** Review and merge PR #21 on github.com.
+- **Measures:** $7.35 (claude-opus-5-5 $7.35; 62 replies, 10,385,521 tokens in, 60,322 out); list-price estimate (this stretch; model haiku wrote the entry)
+
+### 2026-10-20 Local git email question answered; agents to commit as bot identity
+
+- **Session:** host (d7e03a48-93bd-44ef-a1d2-045ad84afabf)
+- **Engineer:** operator
+- **Branch:** chore/records-2026-10-20-close
+- **Asked:** Whether the local git email, the Operator's own address, is right for their commits on this machine, and how agents should set theirs.
+- **Skill:** none
+- **Came out:** Answered in chat. No file changed for this. The agent-side identity stays open as backlog item set-git-commit-identity-options: set commitName and commitEmail on the git Feature in .devcontainer/devcontainer.json, so agent commits take the bot identity.
+- **Friction:** [tooling] Agent commits have no identity set, so the bot identity was applied by hand on each command.
+- **Learned:** The owner's commits and the agents' commits need different identities. Per-command setting works but is manual; a config setting would remove the step.
+- **Decisions:** "Yes, the local email is fine; it is my real address, so my commits should reflect it. Agents should set their own name and email."
+- **For the repository:** [tooling] Finish set-git-commit-identity-options so agent commits use the devhost agent identity without per-command setup.
+- **Decisions needed:** none
+- **Measures:** $1.61 (claude-opus-5-5 $1.61; 13 replies, 2,846,377 tokens in, 5,270 out); list-price estimate (this stretch; model haiku wrote the entry)