An unopenable repository fails loudly — the standing row, the paused surface, the honest heal

Claude-Session: https://claude.ai/code/session_014PtZdPwqZuqEDLc6wZMtEy

Kanban/App/AppModel.swift

@@ -908,6 +908,15 @@ public final class AppModel {
                 committer.reportRecovery = { [weak store] in
                     store?.banners.clearHistorySuspension()
                 }
+                // **The corrupt-`.git` loud failure's standing row** (06-history-undo.md ▸ Rules,
+                // ruled 2026-07-31): a repository the app cannot open pauses the whole git surface
+                // and says so on the strip, "announced per 10-accessibility.md" — and the same seam
+                // heals it, since the paused engine's own 15 s re-read is what notices a repository
+                // repaired in a terminal. Distinct from the suspension above: that row is history
+                // failing to advance and retrying, this one is there being nothing to advance into.
+                committer.reportRepositoryUnreadable = { [weak store] unreadable in
+                    store?.noteRepositoryUnreadable(unreadable)
+                }
                 store.commitSeam = .binding(to: committer)
                 // **The undo stack's ear on the committer** — every commit this engine lands, and
                 // which of it was heal work (06 ▸ Rules ▸ The stack is HEAD's first-parent ancestry,
@@ -933,6 +942,12 @@ public final class AppModel {
             git.reportFailure = { [weak store] failure in
                 store?.banners.postGitFailure(.addGit, reason: failure.message)
             }
+            // **The detection-time answer, published once** (06 ▸ Rules: "a standing breakage-class
+            // banner **at detection**"). The probe ran inside `compose` above — before this session
+            // existed, and therefore before the seam that carries its transitions was wired — so a
+            // board that opened into an unreadable repository raises its row here rather than
+            // waiting for the first debounce to rediscover what composition already knows.
+            store.noteRepositoryUnreadable(git.isRepositoryUnreadable)
         }
         // **The binding 13-native-undo.md ▸ Rules' "registration at the Writer boundary" needs**: the
         // store is that boundary — every app-mediated mutation goes out through one of its write