Design the debt ledger from what the event log already carries

Nine questions answered against the tree at 3c7cf95, no implementation.
The ledger is two event types, one projection beside Task, one pure
eligibility function and one read-only endpoint. Nothing in the task
lifecycle changes.

The first slice writes nothing: a projection over the existing log that
must reproduce the release loop, the opencode adapter gap and the
retry-idleness dynamic from runs 10 to 14. A model that cannot represent
debt already known is wrong before any schema is committed to.

Also corrects run 14: the OpenCode Zen free tier is not blocked, the
selected model is.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CVbaKucEYBjMqVeUgJUsc1

BURNIN.md

@@ -2479,7 +2479,8 @@ stops being latency and becomes model compatibility.
 ### opencode is not running, and the reason was only in the pane
 
 Task `06G4M6HH5BAM235AC4PWYXF1HM` failed at attempt 3 having never left
-`frame`. Its worktree held only `launch.md`. The pane said why:
+`frame`. Its worktree held only `launch.md`. The pane said why. The blocked
+thing is the selected model, not the OpenCode Zen free tier, which works:
 
 ```text
 This model is not available in your country.
@@ -2499,7 +2500,9 @@ fail. Two things are worth keeping.
   not Orchestra's job; surfacing the capture is.
 
 **Do not route to `workpc-opencode` until its model is reachable.** Every task
-sent there burns three attempts and then fails.
+sent there burns three attempts and then fails. `~/.config/opencode/opencode.jsonc`
+sets no top-level `model`, so OpenCode picks its own default. The file already
+declares reachable `nvidia-nim` and `llama-cpp` providers.
 
 ### The retry budget counts idleness, not just failure