The Library door's "Made" list. The SPA (static/app/src/dispatch.jsx) has always fetched this path — it existed only on the motherboard front door (:8794), so on the plane that actually serves the console the door read an empty shelf and said nothing was wrong. Measured 2026-08-19 on staging: 404 on BOTH planes.

Plane-aware ON PURPOSE, because the shelf is one store shared by every caller and each record carries the question it was made from. 268 of the 451 records in the live store are stamped with the caller who caused them — anon-w… among them, a member of the public using the free door — and the other 183 carry no stamp at all, which makes their provenance unproven rather than ours. One tenant reading another tenant's question is the one thing this door must never do. So: owner/local plane -> the whole instance library (the operator's own machine; the same content /owner/library already returns keyless here). public plane, signed in -> only the rows stamped with THIS caller, so a tenant's own solved routes land where the door says they will and nobody else's do. An unstamped row belongs to no one provable and is therefore shown to no one. public plane, nobody signed in -> empty, and scope says which kind of empty.

scope is the field that keeps this honest: the door can tell "nothing made yet" from "not shared here" from "could not read the shelf" (the last one being the error branch, mirroring the front door's contract — never a silent empty shelf).