The census answers no, three receipts found, and the prune was on file all along

CENSUS (read-only, hub store, tester's machine not contacted): no machine that is
not ours can be in the state that cost demo-felhom its history. The hub holds
escrow for three hosts; both demo boxes lost their pre-fix key in the same four
hours on 2026-08-04; peti-felhom and david have no host row and no escrow at all.
A control ran FIRST and had to pass -- the query returned "present (572 bytes)"
for a host known to have material and "absent (NULL)" for one known not to.
Corrected my own instrument on the way: a date-only comparison mislabelled both
losses as after the fix, so the in-force moment is now pinned from the hub's first
post-fix escrow row (11:11:37Z), which independently agrees with the register.

PART 1 ESTABLISHED. The prune is recorded inside R-267 -- the row about the
Configuration page being slow -- because pruning artifacts is what made that page
fast. Arithmetic checks (23+7=30, plus three versions that only surfaced after the
first thirty moved them onto page one = 33) and the PAGINATED listing shows both
generics at exactly ten. R-291's blocking condition is released: the operator was
being asked to establish something already written down. And my counter-argument
yesterday was wrong in exactly the way R-267 warns about -- "containers hold 19"
came from an unpaginated query; paginated they hold 270 and 169.

RECEIPTS: three restored (drives.enrol, backup.tier1, fail.lost-recovery-code),
each citing the document that walked it; the map already read PROVEN-LIVE for all
three, so this follows the map rather than raising a status in the view. NINE
HONEST GREYS. fault.selfheal's best hit argues against it -- an incident recording
self-heal's absence through a 1h15m outage.

THE DECAY RULE FIRED FOR THE FIRST TIME. backup.restore-proof has a receipt from
28 July and is superseded anyway: demo-hp's restore-test failed 5 August and the
box has since been rebuilt. A claim about a continuing behaviour cannot rest on an
old observation. The capability map still reads PROVEN-LIVE and is now the thing
out of step -- recorded, not silently rewritten.

PART 4 specified, not implemented. The orphan card promises restorability the box
rendering it cannot evaluate: the discriminator is on the hub and no wire field
carries it. A conditional promise the system cannot evaluate is the same defect as
an unconditional false one, so the copy stops promising, says what happens, and
names a route. Ships with the next controller change so one bake covers both.

scripts/render_stands.py

@@ -93,9 +93,16 @@ def claim_html(c):
     body = ['<span style="font-size:12px;line-height:1.45;color:#b8c4d6;text-wrap:pretty">',
             esc(c.get("title", ""))]
     if c.get("changed"):
+        ch = c["changed"]
+        if ch.get("also_moved"):
+            # Moved twice. Say so — a second move rendered as a first one hides the fact that a
+            # status is unsettled, which is exactly what a reader needs to see.
+            label = "moved twice: %s, then 2026-08-10 back to %s" % (
+                esc(ch["also_moved"]), esc(c.get("status", "?")))
+        else:
+            label = "changed 2026-08-09, was %s" % esc(ch.get("from", "?"))
         body.append('<span style="display:inline-block;margin-left:6px;padding:1px 5px;border-radius:3px;'
-                    'background:#3a2a12;color:#fbbf24;font-size:10px;white-space:nowrap">changed 2026-08-09, was %s</span>'
-                    % esc(c["changed"].get("from", "?")))
+                    'background:#3a2a12;color:#fbbf24;font-size:10px;white-space:nowrap">%s</span>' % label)
     if c.get("v_verdict") in ("needs-hardware", "contested"):
         col = "#a78bfa" if c["v_verdict"] == "contested" else "#7dd3fc"
         body.append('<span style="display:inline-block;margin-left:6px;padding:1px 5px;border-radius:3px;'
@@ -104,6 +111,10 @@ def claim_html(c):
     if c.get("note"):
         body.append('<span style="display:block;color:#7c8aa3;font-size:11px;margin-top:3px">%s</span>'
                     % esc(c["note"]))
+    decay = c.get("decay") or (c.get("changed") or {}).get("decay")
+    if decay:
+        body.append('<span style="display:block;color:#c08a3e;font-size:11px;margin-top:2px">'
+                    'proof decay: %s</span>' % esc(decay))
     if c.get("changed", {}) and c["changed"].get("reason"):
         body.append('<span style="display:block;color:#9a7b3a;font-size:11px;margin-top:2px">why it moved: %s</span>'
                     % esc(c["changed"]["reason"]))