specs(automation): crm-client-ownership -- owner_id on client profiles and money in the workspace stage

[gHashTag]

Closes #3608

• New specs/automation/crm-client-ownership.t27 (automation::crm_client_ownership, EXTENDS crm-client-workspace): nullable owner_id on crm_client_profiles, unique (owner_id, telegram_id) with the legacy pkey dropped, idempotent migration with backfill from crm_people, unowned rows readable until claimed by the next setup, four owner-scoped reads; payments_v2 COMPLETED MONEY_INCOME scoped to the owner's bots read in crm_clients and crm_history, money before touches, paid/paid_known flags, touches fallback when Supabase is unreachable.
• crm-client-workspace.t27: DASHBOARD_SEEN_LIVE = true on the 2026-09-13 live check (dashboard, client thread, self thread unchanged). RUN_SURVIVED_REDEPLOY stays false.
• docs/now: 2026-09-13-crm-client-ownership-owner-id-on-profiles-and-money-in-the-stage.md.
• tools/published_figures.py: test-blocks pin 12744 -> 12749.
• wasm compiler: both specs typecheckOk, 0 errors, 0 discarded; ASCII only.

Host PR: gHashTag/999-multibots-telegraf (render) -- linked once opened.

Not claimed: migration on prod, paying client seen live.

[github-actions]

📓 NotebookLM Notebook linked to this PR

• Notebook ID: b83263109fb055dc
• URL: https://notebooklm.google.com/notebook/b83263109fb055dc

This notebook contains session context, decisions, and artifacts for this work.

[github-actions]

PR Dashboard

Generated at: 2026-09-13 13:59:40 UTC

• specs(automation): crm-client-ownership -- owner_id on client profiles and money in the workspace stage #3609 specs(automation): crm-client-ownership -- owner_id on client profiles and money in the workspace stage | Created: 2026-09-13 | Updated: 2026-09-13 | 23 failing / 28 total
• specs/automation: inngest-functions-status.t27 (lastRun без проб, lastProbe отдельно) + inngest-probe-suite VERSION 2 #3593 specs/automation: inngest-functions-status.t27 (lastRun без проб, lastProbe отдельно) + inngest-probe-suite VERSION 2 | Created: 2026-09-13 | Updated: 2026-09-13 | 5 failing / 30 total
• fix(ci): make the JSON gate strict, and make the one file it refuses legal #3395 fix(ci): make the JSON gate strict, and make the one file it refuses legal | Created: 2026-09-07 | Updated: 2026-09-07 | 0 failing / 30 total
• fix(rust): a function type is a type alias, not a const's value #3365 fix(rust): a function type is a type alias, not a const's value | Created: 2026-09-06 | Updated: 2026-09-06 | 0 failing / 38 total
• coq(CorePhi): replace proofs that were never checked by a compiler #3343 coq(CorePhi): replace proofs that were never checked by a compiler | Created: 2026-09-06 | Updated: 2026-09-06 | 5 failing / 32 total
• ci(coq): report all thirteen files instead of stopping at the first error #3342 ci(coq): report all thirteen files instead of stopping at the first error | Created: 2026-09-06 | Updated: 2026-09-06 | 3 failing / 30 total
• skill: spool four lessons from this pass #3327 skill: spool four lessons from this pass | Created: 2026-09-05 | Updated: 2026-09-05 | 1 failing / 28 total
• chore(ci)(deps): bump actions/attest-build-provenance from 1 to 4 #3001 chore(ci)(deps): bump actions/attest-build-provenance from 1 to 4 | Created: 2026-09-01 | Updated: 2026-09-12 | 0 failing / 28 total
• chore(ci)(deps): bump softprops/action-gh-release from 2 to 3 #3000 chore(ci)(deps): bump softprops/action-gh-release from 2 to 3 | Created: 2026-09-01 | Updated: 2026-09-12 | 0 failing / 30 total
• chore(ci)(deps): bump github/codeql-action from 3 to 4 #2999 chore(ci)(deps): bump github/codeql-action from 3 to 4 | Created: 2026-09-01 | Updated: 2026-09-12 | 0 failing / 30 total
• Land the formal verification harness on master (it has never run) #2727 Land the formal verification harness on master (it has never run) | Created: 2026-08-27 | Updated: 2026-09-05 | 5 failing / 24 total
• chore(deps)(deps): bump thiserror from 2.0.18 to 2.0.20 #2693 chore(deps)(deps): bump thiserror from 2.0.18 to 2.0.20 | Created: 2026-08-24 | Updated: 2026-08-28 | 3 failing / 34 total
• chore(deps)(deps): bump hyper from 1.10.1 to 1.11.0 #2692 chore(deps)(deps): bump hyper from 1.10.1 to 1.11.0 | Created: 2026-08-24 | Updated: 2026-08-28 | 3 failing / 33 total
• chore(deps)(deps): bump base64 from 0.22.1 to 0.23.1 #2691 chore(deps)(deps): bump base64 from 0.22.1 to 0.23.1 | Created: 2026-08-24 | Updated: 2026-08-28 | 3 failing / 34 total
• chore(deps)(deps): bump serde from 1.0.228 to 1.0.229 #2690 chore(deps)(deps): bump serde from 1.0.228 to 1.0.229 | Created: 2026-08-24 | Updated: 2026-08-28 | 3 failing / 34 total
• chore(deps)(deps): bump uuid from 1.23.2 to 1.25.0 #2689 chore(deps)(deps): bump uuid from 1.23.2 to 1.25.0 | Created: 2026-08-24 | Updated: 2026-08-28 | 3 failing / 34 total

Summary

Status	Count
Total Open PRs	16
PRs with Failing Checks	10
PRs with All Checks Green	6
READY	5
FAILING	10
PENDING	0
NO CHECKS YET	0

These columns do not partition: 5 + 10 + 0 + 0 = 15, and there are 16 open PRs. A PR is being counted twice or not at all.

Seal Status

• ⚠️ STALE -- sha256(compiler.rs)=d4c5b22b471e != manifest seal=87e5cbd3ad94.
  The committed NMSE numbers were certified against an older compiler.rs.
  Run scripts/reseal-check.sh locally for the two-step reseal command (advisory; not a merge gate).