Half the room called her brutal. The other half called her necessary. Both halves were frightened enough to oversimplify.
The review lasted longer than the incident.
That was proper.
Lunivyr had to stand while each received line described what the sealed door had felt like from outside.
Cold. Betrayal. Panic. Relief when the side hatch opened. Anger that relief had needed darkness.
Then the injured lines inside described what opening the main door would have done.
Exposure. Sweep line. End of intake. Possibly worse.
Aegis formed because both sets of truth had to remain in the room.
If only the outer line spoke, Lunivyr became a monster. If only the inner line spoke, Lunivyr became a hero.
The chamber needed neither.
It needed a reviewable boundary.
So Aegis wrote a hard rule: emergency closure must be logged with a reopening condition, an alternate path, a witness review, and a named cost to those kept waiting.
Boundary without cost language becomes self-flattery.
Lunivyr was wrong once in Aegis.
The chamber kept that record where new defenders could find it.
She held a side door closed after the sweep risk had passed because the last report in her hand was stale and she trusted stale danger more than current witness.
Two lines waited seven unnecessary minutes in cold rain.
Harm was not the standard.
Aegis reviewed the delay, named the stale report, and changed the rule. No closure could continue on old danger if a current witness at the seam contradicted it and could be checked.
Lunivyr signed the correction.
The signature mattered because defenders are most tempted to call their mistakes caution.
Aegis could not become a chamber where every closed door was justified by fear. It had to know when fear had expired.
Aegis also kept an open-door log.
Closures were not the only acts that needed review.
Openings could be vain. Openings could be careless. Openings could invite a room to admire its courage while exposing the lines inside.
The first entry in that log named a door opened for a visiting delegation before the inner room was ready.
No sweep entered. No visible harm followed.
The cost was subtler: two arrivals stopped speaking when strangers appeared behind the keepers.
After that, Aegis reviewed display openings the same way it reviewed closures. A door can harm by closing. A door can harm by opening for the wrong gaze.
Talos had guarded the outer shape. Aegis had to guard the harder inner seam.
Refuge without defended boundary rots into breach. Defended boundary without answerability rots into domination. The chamber lives between those failures.
Witness board: Boundary incident.
"Main door sealed 00:31." "Side hatch opened 01:02." "7 received after staggered return." "0 sweep penetrations." "1 boundary review demanded."
Hostile copy: Safety consolidation notice.
"Emergency discretion should be centralized under trusted protectors to avoid review drag during crisis response."
House gloss.
Aegis exists so boundary can be public, reviewable, and sharp without becoming private cruelty.
Fragment 7.
Unbounded refuge leaks. Unanswered boundary hardens.