Hands the record flip to the conductor

CLAUDE.md

@@ -155,13 +155,23 @@ Read before making design decisions:
 - `docs/research/260816-sui-kua-gui-research-and-direction.md` - the research
   that led to this repo existing, and the source the ADRs cite
 
-Changing the record is itself gated. Any PR that touches `docs/adr/` is
-reviewed by one fresh cold direction agent, and nothing else satisfies that
-gate; its verdict tuple - the verdict word, the finding count, and which
-pass it was - is recorded on the bead. Only an unqualified verdict merges,
-or the operator's own substance ruling on a qualified one. A decision
-record merges at **proposed**; flipping it to **accepted** is a separate PR
-through the same gate.
+Changing the record is itself gated. A PR that touches `docs/adr/` carries in
+its body the direction check its author ran: every claim verified against
+main, every code cite by anchor with the SHA it was read at, zero removed
+lines in the record. A fresh cold direction agent reviews the PR only when it
+also changes a contract surface (a public function, a wire shape, a
+host-facing behaviour) or flips a status line; its verdict tuple - the verdict
+word, the finding count, and which pass it was - is then recorded on the bead,
+and only an unqualified verdict merges. A decision record merges at
+**proposed** and stays proposed until the code that implements it has shipped
+in a published version of this package. Flipping it to **accepted** is the
+campaign conductor's act under the umbrella's flip standard: one flip PR for
+this repo per campaign or tail, every claim re-verified against main at the
+published version's SHA, reviewed by the cold direction agent above and merged
+under the campaign's consent. The operator overturns a flip on the campaign's
+report line and is not otherwise asked. A record whose code is on main but
+unpublished is not accepted yet; a record with a claim that fails verification
+stays proposed alone and is reported with the claim quoted.
 
 ## Build & Test