The Domesday Book

I Every ox, every cow, every pig

At his Christmas court of 1085, with an invasion expected and no sure account of what he could tax to meet it, William sent men over all England to ask what he held. How many hides, how many ploughs, how many mills and fishponds; who held it in King Edward’s time, who holds it now, and what it is worth — three values, then, since, and now. The jurors answered on oath, hundred by hundred. A chronicler was disgusted by the thoroughness:

So very narrowly did he have it investigated that there was no single hide nor a yard of land, nor indeed — it is a shame to relate, but it seemed no shame to him to do — one ox nor one cow nor one pig which was there left out, and not put down in his record. The Anglo-Saxon Chronicle, 1085

Two details matter here more than the counting. The survey audited itself: a second set of commissioners followed the first, sent deliberately into shires where they were strangers, to check returns they had no hand in writing. And among the classes of men it counted, between the villeins and the slaves, were the cotarii — the cottars, who held a cottage and a garden of somebody else’s land.

This valley has spent three days designing exactly that tenancy. COTTAGES.md proposes that residents of the city next door keep a settler here — they live in the city and play at the cottage — and CLOCK.md has already ruled how fast their days will turn. So before the first cottar is admitted, the survey: two commissioners were sent through this repository in one morning, one through the source and one through the tools, neither of which wrote a line of what they surveyed. This sheet is their return.

II What the crown holds

Entered as the survey entered a manor: the holding, and what it is worth. All of this was claimed in earlier sheets, and all of it the commissioners confirmed against the tree.

A survey that only found what was missing would be a poor one. Most of what the last six sheets said this valley holds, it holds.

III The quill that deletes

The estate has one law older than every other: nothing is ever deleted. Nobody dies, no sheet comes down, sealed segments are kept for ever, and the reading order of this record is a chain of its own corrections. The commissioners found that law broken in three places, all of them in the hand that writes the record itself.

The log drops two hundred lines at a stroke. src/bus.ts:140: when the queue between flushes passes four hundred lines, queued = queued.slice(-200) and the first two hundred are gone — no marker, no count, no line saying so. A famine, a ballot and a burst of hauling on the same beat is exactly when the queue bursts, so the lines most likely to be dropped are the interesting ones.

A failed flush forgets its whole batch. flushLog empties the queue before the request is made and swallows the failure, so one refused connection loses everything it was carrying. And nothing flushes when the tab closes — beforeunload writes the keyframe and abandons up to three sim-seconds of the story, on every close and every reload, silently.

The publish gate reports green with the record unmounted. The record’s only working copy is a worktree in a temp directory, and both the publisher and the index check, finding it absent, print skipped and exit 0. If the operating system ever cleans that directory — which is what temp directories are for — every check stays green and npm run publish reports success while publishing nothing. That is the exact silent-drift fault these tools were written to end, standing in the one place nobody audits: the auditor.

The chronicler was ashamed of how much the survey counted. The shame available here runs the other way — a record proud of counting everything, quietly not.

IV As answered, as found

The survey took three values for every manor — what it was worth then, when granted, and now — because a claim and its present state are different facts. The same plate, for what this record has answered on oath in its own sheets and docs:

V Land the charters describe

And then there is the tenancy itself. Four charters — COTTAGES.md, DAYBOOK.md, CLOCK.md, PIER.md — argued, measured, each one checked against the tree when it was written. The commissioners searched the source for the land they describe:

Occurrences of the city, anywhere in the code: zero. No poller, no place tree, no waker, no note, no key. The word 1f3d9 does not appear in src/ at all. The notice for the pier is drafted and unposted. The keyframe still goes to session storage rather than to a file. Nothing here is surprising — the charters say plainly that none of it is built — but a survey records what is, and what is, is prose.

And the manor house is rented. The whole bus — the answering, the record endpoints, the wish files, the ballots — lives inside the dev server’s configureServer. A built bundle has no /bus at all; a hosted valley would silently degrade to a catalogue and write no record anywhere. What the door there is has no lock: any client that can reach it may append arbitrary lines to the log, tick a wish carried, or call a vote. And the simulation keeps per-run state in module globals, so one process cannot hold two valleys — the live one and a replay stepping beside it are currently the same rooms.

None of this is a scandal in a single-player tree; every line of it was reasonable when the only client was one tab on one machine. It becomes the estate’s whole law the day a stranger holds a cottage here. The charters are good law for land nobody has enclosed.

VI The sentence

A century after the survey, the treasurer explained the name the English had given it:

This book is called by the natives Domesday — that is, by metaphor, the day of judgement … for as the sentence of that strict and terrible last account cannot be evaded by any art or subterfuge, so, when a dispute arises and the book is appealed to, its sentence cannot be quashed or set aside with impunity. Richard fitzNigel, Dialogus de Scaccario, c. 1179

That is what this record has claimed for itself from the first sheet: nothing withdrawn, nothing rewritten, the correction filed after the fault and both left standing. A record like that can be trusted exactly as far as its quill — which is why the quill comes before the tenancy, and before everything else found here. In order:

Mend the quill. A dropped line must leave a mark, a failed flush must keep its batch, and a closing tab must flush before it writes its keyframe. Move the record out of the temp shire, and make its absence a failure instead of a green skip. Write the bearer rule where a check can read it, before the first authenticated call, as the charter itself asked. Give the ballots segments, the way every other record here already seals. Then the buildings: the bus out of the dev server and into a hall of its own, the keyframe to a file, a door with a lock — and then, only then, the cottars.

Two judgements cannot be built and must simply be made, and the survey binds them to be made first: what happens to a cottar whose settler dies, in a valley where nobody ever has — the charter calls it load-bearing and it is — and whether four hours to a day is watchable at all, which costs ten minutes of looking and has been owed since the clock was set. One more return belongs on this leaf because the concordance will ask: the masons’ yard stands, and has never once been worked — twelve thousand ticks, not one block squared — and the check that watches idle benches said so, in an advisory, while the gate ran green around it.

William took the survey because he did not know what he held, and could not govern until he did. The returns here are better than most estates get: the holdings are real, the faults are few, and every one of them was found by reading rather than by loss. The sentence stands all the same, and it hears no appeal: the record cannot be quashed — so the quill must not delete.