docs(ledger): record the gamut safety batch

Author: cevr

plans/architecture-loop-2026-09-22.md

@@ -1454,3 +1454,11 @@ Opening HEAD `59517a2bc`. Sweeps and triage in `~/.cache/architecture-loop/gent/
 - Review: counsel r1 (G1a raw input, G1b subject fields, G2 classifier text truncation, G3 config staleness, recovery and verdict-write failures), counsel r2 (two blockers in the G3 repair: an edit between key and setup cached Allow under a Deny fingerprint; a transient setup read failure turned the guard off), orchestrator line review of the round-3 repair. Main merged (index.ts and docs table conflicts only).
 - Validation: gate EXIT 0 (core 1277, extensions 1387, tui 1460, tooling 378, sdk 54, site 9, examples 3), E2E EXIT 0 (32 + 24). Merged `4b2bdf61d`, pushed. Several earlier gate runs failed only on timing tests at load average 45–63; each passed alone. Full checks now take a shared flock with the gent dogfood loop.
 - Carried: reuse `patternMatcher` (domain/agent.ts) for guard tool globs now that narrow-only is on main; a cell with N host calls costs N+1 classifier calls (opt-in); subject fields are a fixed list; a config write that changes any key but `disabledExtensions` rebuilds the profile (setups only; Resources shared by build key); `mcp.json` is not in the profile key (staleness predates this batch); a setup that keeps `FileSystem` sees the build-time config files for the profile's life.
+
+### Pass 31 (gent dogfood loop) gamut safety, 2026-10-05
+
+- First batch orchestrated by gent itself (Sol 6.1 high orchestrator and implementor, Sol 6.1 max read-only reviewer: R1 approve, no findings). Findings R31-periphery-3/4 from gent's periphery sweep. Report `~/.cache/architecture-loop/gent/pass31-gent/apply-gamut-safety.md`.
+- Run ownership: `readState` refuses a state file whose recorded binary belongs to another checkout (canonical path), so two checkouts with the same name cannot close each other's pane or remove each other's scratch tree.
+- Offline catalog: offline, gamut reads the stored models.dev chat snapshot from a `/bin/cp` copy of the selected gent database and its WAL, opened read-only (the obsolete `~/.gent/models.json` fallback is gone: nothing writes it). A missing or invalid snapshot keeps the fetch error.
+- Validation: gent: 61 focused tests (8 new, red and breakfix probes), gate and E2E green. Orchestrator: line review, main merged, gate under the shared check lock EXIT 1 on one TUI timing test ("a pane that opens over a previewing prompt search gives the draft back"), which passes 3/3 alone; the batch touches only `testbeds/gamut`. Merged `f98e37f82`, pushed.
+- Carried: two concurrent `up` runs can both pass the absent-state check (admission is not atomic); the WAL copy is best effort, not an atomic snapshot; a state file whose checkout was removed is refused with a raw ENOENT instead of a clear message; the prompt-search App test fails under load (also seen in guard runs).