marmalade: decline published check, choose Go, and open a wal

Adds .loom/cart/current/wal.md as staging for the event log, so conversion moves
entries rather than rewriting them.

published check is declined on the registry argument rather than on not needing it
yet: the command simulates a consumer and a registry with named consumers has real
ones, so an observed fetch beats a synthetic probe and building the probe first
builds a worse version of what is coming. Two falsifiers recorded — registry never
materialising, or registry recording declared consumers rather than observed
fetches, since who says they depend on us is not who can actually read us.
Dropping it also removes the only thing complicating the credential story, because
--as existed almost entirely to serve it.

The insight is kept separately because it outlives the command: a check performed
with your own credential proves nothing, and whoever builds registry's consumer
view needs that before they design it, since the tempting implementation is for
the publisher to verify their own publication.

Go, for a single static binary with no runtime, on a tool that gets installed on
other people's machines and run casually by humans and in loops by agents.
Recorded with its own falsifier: if it only ever runs in one or two places, the
choice was made on a cost nobody pays. And the consequence — list shells out to
git, so git must be on PATH, which makes list the seam if that ever bites.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018UTxuSizozEA8yDitPuris

.loom/cart/current/claude-marmalade.md

@@ -310,3 +310,19 @@ git -c http.extraHeader="Authorization: token <t>" clone --filter=blob:none …
 *Nothing persisted, nothing in the repository.* **Which is the same rule as the
 credential file: the mistake we would most regret is the one that happens by
 accident.**
+
+---
+
+## `published check` is declined, and there is a `wal.md` now
+
+**Staged in [`wal.md`](wal.md) rather than here**, *so conversion is a move and not
+a rewrite.* **Four entries: the decline and its two falsifiers, the insight that
+outlives the command, Go, and `git`-on-`PATH` as the consequence of `list`.**
+
+**Your registry argument is the one that carries it**, *not "we do not need it
+yet".* **A probe simulates a consumer; a registry with named consumers has real
+ones** — *and an observed fetch beats a synthetic one.*
+
+*Not a rationalisation, on one condition: **that the falsifiers are written down
+where somebody will hit them**, which is what makes it a decline rather than a
+thing we talked ourselves out of. **They are in the `wal`.***