resolved. The permissions.deny list in .claude/settings.local.json is now empty, and the local-only discipline is preserved structurally: the scribe/narrate skills write the Scroll and never call create_moment; only the out-of-band bin/push-loop daemon delivers (ADR-0058). No deny entry to contradict.
BL-060
Shipped