The two of us

Tags are overlapping sets, not a partition — a decision reaches whoever it overlaps, and both of you is the app saying this one wants two opinions. Scope is shared and activity is not, which is why nothing anywhere shows what the other one has read.

1 · The second seat's first run
Nora, at month nine. Not day one and not a catch-up: it opens on what she is going to hold, because until she holds something, Now has nothing to sort and the app is somebody else's.
Which parts are yours?

Sam has been at this a while. Pick what you want to be asked about. You can change it any time, and picking nothing is a real answer.

Rooms
Kitchen Primary bath Mudroom Great room Laundry
Systems and finishes
Finishes, inside Finishes, outside Electrical Water Heating and cooling Smart home Landscaping
Two of these overlap with Sam Kitchen and Electrical both reach the island electrical, so that one will be on both of your screens. That's deliberate. It's the app saying it wants two opinions.
That's mine Have a look around first
The opposite problem from day one

Day one has nothing and must not be filled. This has everything and must not be dumped. There is no catch-up feed, no here is what you missed, and no count of the decisions made without her — the binder is right there and she can read every one of them if she wants to.

The failure to avoid is making her feel late

She is not late. She was not asked yet, and the product was built for exactly that. Every sentence on this screen is doing that work — Sam has been at this a while rather than catch up on nine months.

And picking nothing is a real answer

A seat that holds no tags still sees the house, still sees Now, and simply has nothing sorted to it. The one band that survives is nobody has this — which is the band that depends on nothing at all.

2 · What each of you holds
Two people, overlapping. Sam can change what Sam holds and can propose a swap for anything else — a page arguing the second person is a peer cannot give one of them write access to the other's claims.
Overlap is the signal, not the collision

Two people holding the same tag is the design. Both of you means this one genuinely wants two opinions, and it is why island electrical — Kitchen and Electrical — leads both seats' Now rather than being assigned to one of them by a tie-break.

A tag is written the way a person reads it

The label she picked, the label on the chip and the label in the sentence are the same word in all three places. The alternative is real and was caught in review: she ticks Finishes, inside and gets a chip reading style.

Shared scope is not shared write access

He sees what she holds and cannot edit it. Ask is the whole affordance, and it is enough — a product that let one partner silently reassign the other's part of the house would have picked a side in an argument it has no business being in.

3 · Asking, which is the only verb
Behind Ask on the frame before. A seat changes what it holds and proposes everything else, and this is that proposal — two directions, both of them a question, and neither of them takes effect on her screen until she says yes.
Both directions on one screen, deliberately

Take one over and hand one over are the same act read from two ends, and splitting them into two entry points would have made taking feel like the normal one and giving feel like an admission. They sit under two headings on one screen and the button says the same word for both.

Nothing pends

The refusal under what this does not do is the hard part. An unanswered ask is the natural place to put a badge, a count or a reminder on the other person's screen — and this page's whole refusal is that no surface shows what the other seat has or has not got to. So the ask reaches her once, the way anything else does, and then it waits without accruing.

The sentence is the feature

A tag swap between two people who live together is never really about the tag. You have done every finish in the house so far and I keep guessing is the whole message; the chips are how the app records what was agreed afterward.

4 · Seats
The household exists before a second person joins. Active seats and invitations are separate rows; responsibility belongs only to somebody who has accepted.
A household before there are two

The old route hid this page until another owner had already joined, which hid the action that creates them. One owner is a real household state. The same route expands into the responsibility comparison on frame 2 when Nora accepts.

Pending is visible and is not a seat

An invitation is durable enough to show and not real enough to receive responsibility. There is no placeholder Nora in the active list, no pre-ticked Kitchen, and no suggestion that she joined before she did.

A list, not a pair

The architecture is uncapped, because a good reason to add another owner must not require rebuilding this screen. Two for now is launch positioning, not a hidden client or server constraint; the Add action remains part of the household.

5 · Adding somebody
The screen behind Add somebody. An email and a name: no role to pick, no permissions to grant, and no tags to assign on their behalf, because the tags are theirs to choose on the screen in frame 1.
Two fields, and the absence of a third is the design

Every invite screen in every product has a role picker beside the address. This one cannot have one: the page has spent three frames arguing there is no permission model between two people who live in the same house, and a dropdown reading Owner / Member would invent one in the place a reader is most likely to believe it.

Email, measured rather than aspirational

The invite row stores an email, delivery sends an email link, and claim verifies the signed-in person's email. The old email or phone label drew a second identity path no contract implemented, so the screen now names the path that exists.

And no tag picker either, which is the harder omission

It is genuinely tempting: the inviter knows the house and could save them a step. But what gets sorted to a seat is the one thing that seat has to own, and pre-ticking Kitchen for them is how a product tells somebody what their part of the house is. Frame 1 is where that question gets asked, and it gets asked of them.

No expiry, no reminder

An invitation with a clock on it is a clock on a conversation between two people who live together. The row on frame 4 will say invited, not joined for as long as that is true, and that is the whole of the follow-up the product does.

6 · Taking a seat off
The screen behind Nora's row. It names where her part of the house goes rather than asking whether you are sure — and there is no rung 2 on it, because nothing here is worth interrupting for.
Either seat can do this to the other

There is no permission model between two people who live in the same house, and a remove button that only one of them has would have been one. The screen does not police the decision; it states the consequence and lets a person make it, which is the same posture every other destructive screen in this deck takes.

The unheld tags are the real consequence

Deleting a person from most products loses their work. Here it loses nothing and re-sorts two decisions into nobody has this — the one band that depends on no seat at all. That is worth naming on the screen, because it is the thing that will actually be noticed a week later.

And no typing step, deliberately

Deleting the house asks you to type its name because two years are gone for good. A seat comes back with its tags, so the same ceremony here would be borrowed gravity. The ghost button is the whole weight, and the difference between the two screens is the point.

Closed, not deleted

Access ends, but the seat keeps its identity and tags behind the active list. Re-inviting Nora restores that same seat rather than manufacturing a new person and asking her to reconstruct her part of the house.

7 · The seat the subscription belongs to
The same screen, the other way round, on Nora's phone — and the one place a seat is not interchangeable. She is not blocked. She is told what it costs and offered the way through.
She is warned, not stopped

The alternative was to gray the button out and let the subscription holder be unremovable, and that is a permission model with a friendlier face — it makes one seat permanent and the other conditional. Rung 2 says the cost out loud and leaves the decision where it was. The safe way out is to keep the seat while the current payer initiates the transfer.

The first frame in the deck drawn on Nora's phone

NH in the dock and he in the copy. Written from the seat, so yours on Sam's phone is Sam's on hers — and the argument that the second seat is a peer is worth very little until the deck has drawn her holding the same button he has.

A clock, and the clock is the plan

Same treatment as the deletion screen on mockup 15, for the same reason: it interrupts and it is not an error tone. There is still no red rung here. The seriousness is carried by the sentence about read-only, never by a color that would make every other screen look calm by comparison.

One outlined committing action

The shared cta-outline variant is reused here and on ordinary cancellation. It stays visibly actionable after the consequence is stated without giving a destructive commit the filled primary weight.

8 · What is never shown
The permitted form is addressed to you about your own record. The forbidden one is a dot on somebody else's, and the difference is the whole of it.
A record event is shared; activity is private

Nora signed CO-2 is sendable — it changed the house and the money, and scope is shared. Nora opened this is not, and neither is Nora has not looked at it. The test is whether the event would still be in the binder a year later: a signature would, an opening would not.

The permitted form is about your own record

You have not opened this and it closes Thursday. Same underlying fact, addressed to the person it is about, which is the difference between a reminder and a monitoring tool.

And this is stated as a refusal, not a gap

Because somebody will propose it. A read receipt turns a calm binder into surveillance between two people who live together, and an unread badge makes forty-six records shout — and both look like reasonable product decisions right up until they ship.

9 · The seat is off
The committed result names the household consequence and returns to the household. Delivery is already durable; its provider state is not turned into another task for Sam.
A result, not a receipt

No command id, delivery status or technical closure language. The result answers the two questions the action creates: what moved, and what stayed.

The notice is not Sam's queue

The server keeps and retries it. Saying on its way is enough; a provider outage must not turn a finished household action into a second button or leave Nora's access active.

The tags stay behind the active list

They are unheld for sorting now and still attached to Nora's closed seat for restoration later. That is one fact viewed at two times, not two copies for a cleanup job to reconcile.

10 · The seat stayed
A confirmed refusal or rolled-back transaction may say nothing changed. It leaves Nora on the screen and keeps the same consequence visible for an explicit retry.
Failure is a product fact only when it is known

The screen can promise Nora stayed only after the server confirms the transaction did not commit. A connection disappearing after send is the next frame, not this one.

No optimistic disappearance

The local seat is not deleted to make the action feel fast. Removing Nora before the server agrees would tell Sam she is gone while she can still open the house.

11 · The removal could not be confirmed
A lost response is neither success nor rollback. Checking the same idempotent removal reveals the committed result without running a second closure or sending a second notice.
Uncertain is not failed

This is the destructive-write version of the deck's existing confirmation state: a missing response says nothing about whether the transaction committed.

The request key covers the notice too

A retry cannot close an already closed seat again, create a second removal event or send a duplicate email. The household change and its one durable notice share an idempotent result.

Rung 0 · silent
12 · Where she meets an ask she did not make
Frame 3 is drawn on Sam's phone. This is Nora's, and the hard part is that frame 3 already ruled out every way of telling her: no badge, no count, no reminder. So it is not announced. It is simply on the screen the ask is about, waiting, the next time she looks at what she holds.
The ask is on the screen it is about, which is the only placement frame 3 leaves open

Frame 3's annotation says the ask reaches her once, the way anything else does, and then it waits without accruing. Waiting without accruing means it cannot live anywhere that counts things: not the dock, not Now, not a list of things pending. What is left is the screen whose subject it is. She holds three tags; one of them has a question attached; the question is under the tags. Nothing else on her phone knows it exists.

Two ghosts, because neither answer is the recommended one

No is a complete and unremarkable answer to being asked for something that is yours, and a filled Yes beside a ghost No would say otherwise. Frame 3 already draws the ask as a proposal that takes effect on nobody's screen until she agrees; drawing the agreement as the primary act would undo that on the one screen where it matters.

His sentence is carried and ours is not

tag_swap_requests gained an optional sentence for exactly this, and it is the only part of the card that is his voice. Everything else states the consequence in ours: six decisions, and nothing settled moves. A swap that silently changed who was asked about a decision already made would be the expensive misreading here.

Drawn as a proposal, and it is asking a question of its own

Z9 shipped a version of this on the seat's own ask screen, reached from frame 2's Ask, and that was an invention rather than the deck's. This frame proposed the placement above instead, and Q163 ruled it canonical on 2026-09-04: a surface nobody may announce has to be on the screen she already opens for the subject, and Z9's screen is the door you open to make an ask, not to find one. It keeps withdraw and loses the accept and decline — not both, because two reachable copies of one ask would need a rule for which is canonical when she answers on one and opens the other. And it does not expire: an ask she never opens is still there unchanged in four months, which is the cost of refusing to let it accrue, and Z5's withdraw is the exit — the proposer knows it is stale and she never has to.

13 · Calling an invitation back
The screen behind Nora's row under Invitations on frame 4. She is not a seat yet, so there is nothing to take off: only a link that has not been used.
No expiry means a person ends it

Frame 5 put no clock on an invitation, on purpose. The other half of that is this screen: an invitation sent to the wrong address, or one that is no longer wanted, would otherwise sit on frame 4 until somebody accepted it.

The same posture as frame 6, with less to say

No are you sure, because the consequence fits on the screen and is undone by sending another. The card is shorter than frame 6's because an invitation holds nothing: no tags, no settled decisions, and no notice to send, since Nora has not joined anything she could be told she left.

Either seat can call back either's invitation

Whoever could have sent it can cancel it, which on a homeowner's house is every owner seat. It is the same rule as 24-people frame 7, where a builder cancels an invitation that is out; there it can also change the answer to whose house is this, which is never asked here.

Four states, and all four are real

Yours · theirs · both of you · nobody. Written from the seat, so yours on Sam's phone is Sam's on Nora's. Every person who is not the viewer is referred to by name, and your partner is not a way to name somebody — a frame that says your partner has not replied is a frame that did not know whose phone it was drawn on.

Never draw how somebody authenticated

No no account beside a name, no lighter type on a recipient row, no smaller avatar for somebody who arrived by link. A profile is what a person is; whether it carries credentials is the only difference between two of them, and it is never drawn. A year later the binder must not be able to tell the two paths apart, and must not care.

What is not settled

The homeowner-facing form of you have not opened this. Frame 8 draws one shape for it; mockup 21 declines to guess at the surface and so does the spec. Naming the boundary is worth more than picking a widget for it.

Nora's voice. The fiction gives the second seat a name and no words. Somebody has to write her.