To-be 45 §5: say what the holder does while the controller cannot be read, and that every fold and hold is recorded (ADR 0318, issue 271)

03-DESIGN/01-to-be/45-a-core-that-cannot-fail-silently.md

@@ -384,10 +384,11 @@ section; to-be 46 §13 builds what follows from it.
   when an event older than its last reading arrives, the holder reads the open conditions from the
   controller and takes them as its state; an event is acted on only when it is newer than that reading
   (five seconds of clock slack) and its own `at` is no more than ten minutes old — otherwise it is
-  recorded as state and never said as its own message. Ends and drops below are recorded in the
-  holder's own history. A condition open in the holder's state but absent from the
-  controller's open set ended while the holder was away, and is closed quietly: edited where a channel
-  can, never sent to wake a desktop. A clearing of something never said says nothing, and a message
+  recorded as state and never said as its own message. While the controller cannot be read, the `at`
+  test alone decides, and the reading is asked for again until it is had. Every close, drop, fold into
+  a digest and hold under the cap is recorded in the holder's own history. A condition open in the
+  holder's state but absent from the controller's open set ended while the holder was away, and is
+  closed quietly: edited where a channel can, never sent to wake a desktop. A clearing of something never said says nothing, and a message
   still waiting is dropped the moment its clearing is read. Every urgent condition a reading finds open
   and unsaid is named once, together, in one digest; when the grace minute ends, each still open and
   unacknowledged is then sent as its own message with its answers. A grace minute follows every start or