ADR 0041 and the build handoff for the node host

Building tier 0 forced the question "the one binary installed by hand" had been
carrying unexamined. A TypeScript host needs a runtime present before it runs,
so the thing installed by hand becomes two — and the second must be installed by
the means the host exists to replace.

So the host is a statically linked binary that requires nothing present, written
in Go. Rejected: a runtime installed first, which breaks the property the tier
rests on; and bundling the runtime into the executable, which carries ninety
megabytes to preserve a language choice and puts a young feature at the bottom
of the stack.

The argument that decided it is architectural rather than about taste. 0037
means the host never queries the mesh database and 0039 means it only receives
declarations, so the host shares NO code with any other tier — not a client, not
a schema, not the SDK. The language boundary falls exactly on a boundary that
already exists, and a second language usually costs duplicated logic where here
there is none to duplicate.

§8 gains a scope: it said "TypeScript throughout" when everything was a service
or a surface, and is now scoped to those with tier 0 named. Another sync owed.

Playbook 04 steps 2 and 4: repos.md records mesh-host as existing, the design
takes code: [mesh-host] and status: in-progress.

03-DESIGN/01-to-be/05-the-node-host.md

@@ -1,7 +1,7 @@
 ---
 layer: to-be
-status: designed
-code: []
+status: in-progress
+code: [mesh-host]
 updated: 2026-08-26
 decisions:
   - 02-DECISIONS/0030-the-repository-structure.md
@@ -10,6 +10,7 @@ decisions:
   - 02-DECISIONS/0038-a-node-joins-by-linking-first.md
   - 02-DECISIONS/0039-the-link-is-the-security-boundary.md
   - 02-DECISIONS/0008-a-failed-step-fails-the-job.md
+  - 02-DECISIONS/0041-the-host-depends-on-nothing.md
 ---
 
 # The node host
@@ -18,6 +19,11 @@ Tier 0. The one thing ever installed by hand, and the only thing that changes a
 
 ## What it is
 
+A **statically linked binary that requires nothing to be present** — copy it onto a machine and
+run it, and that is the whole installation
+([ADR 0041](../../02-DECISIONS/0041-the-host-depends-on-nothing.md)). Written in Go, because the
+job is system-level and because the host shares no code with any other tier.
+
 A single binary with one job: **apply declared state on this machine**
 ([ADR 0037](../../02-DECISIONS/0037-the-host-applies-it-does-not-decide.md)). Overlay
 membership, packet filtering, packages, services, containers and filesystems are not six