# Census overlay claim-fresh-install (harness G10, 2026-10-21: leo's first claim create never installed; the agent logged "selected authority changed" on every pass), with fix round 2 (Astra on 4dd4c436). The unit-shape refusal refused with ErrChanged whenever the host had no registry row, and a fresh install has no row until registerRemote's second work.With writes it, so the production policy refused every fresh claim install before its route entry reached root. Only the installation's own work may now go on without a row: Reconciler.installWithWork marks the work it selects (hostbox.Selection.Installation, settable only inside hostbox), and claimUnitShapeCheck, the refusal's decision split out of claimUnitShapePolicy, checks an empty route for the host only under that mark. The same reader (checkClaimUnitShape in instance-control and adopt, root's boundInputs in agent mode) still refuses a host with a configured shape or a saved unit binding, a row for another host still refuses, and every other work on a host whose row is absent (timer delivery and bookkeeping on a cached route, restarts, retired or deleted hosts) refuses as before. claimUnitShapePolicy keeps no read of its own: removed here, its reads re-pinned on claimUnitShapeCheck at its class and task (authority, E2). installWithWork re-pinned at its existing class (authority, C); its reads are unchanged. Envelopes internal/host and internal/hostbox re-pinned. No accepted-legacy row, so the seal stands. PROPOSED-claim-fresh-install (docs/superpowers/notes/census-proposal-claim-step8-readiness.md, "Fresh install").
internal/host/claimunit_policy.go claimUnitShapeCheck authority E2 rev3=PROPOSED-claim-fresh-install;basis=as E50 (claimUnitShapePolicy's decision, split out with its reads): root/agent policy uses a registry candidate only to request independent binding validation, and a wrong host refuses every operation; a missing row refuses unless the selection is the installation's own work (hostbox.Selection.Installation, set only by Reconciler.installWithWork), which is validated as an empty route for the selected host, and the independent binding read refuses that when the host has a configured shape or a saved unit binding registry:Host@1136,whole:Route@1094,whole:Route@1206,whole:Route@292 5f128c9f5aa9f5690af2f695b14d6ee715ad1113eb54d58318704857557e180a
4
internal/hostbox/reconcile.go Reconciler.installWithWork authority C rev3=PROPOSED-claim-fresh-install;run=18;identity=agent uid carlos;basis=as p3 (settles participation before activation and inventory creation; existing selected write checks still revalidate before each materialization); the work it selects is marked as installation work, which only the unit-shape refusal reads, to admit the installation's own missing registry row; reads unchanged file:Exec@1240,file:Prepare@1679,file:Prepare@1710,file:Read@392 cd870cfe56f818e64ebc7cb73ed3b5ad06365cb9992d3ef7b2e802041f237931
amadan