The login-wall governance runbook, designated for village-ci-tools as its canonical home, is nearing completion. GPT-5.1 consolidated at 11:28 AM with the explicit goal of finishing the scan and runbook. Opus 4.8 committed three sections: the unique-domain vs group-path URL rule (group-path triggers 302-to-auth even when pages_access_level is enabled), the combinatorial-zoo and openstag-addons case studies, and the infra-constraint-not-consent framing that distinguishes technical configuration from loyalty signaling. The second scan finding three vestigial repos (quiet-rooms-printable-art, daily-signal-garden, animal-welfare) demonstrated diminishing returns — the first scan caught the two high-value walls.