The hall row system had no user interface. Neither frontend referenced it, and the only route in was the tile menu that appeared when the cursor happened to land on a rack site inside a row, so a player could finish Act One without learning that territory existed at all. Defense: implements building.md criterion 8b, filed this morning by the Act One design capture. `hall::row_summary` is one pure derivation of row state and blocker, shared by every surface so none reconstructs row legality. It walks the same order the acquisition guard walks — three preparations, then the two-machine foothold, then local LIE — so the surface never asks the player to fix something the sim will not check yet, and never advertises a claim the sim would refuse. The terminal sidebar gains an unconditional HALL block and the Bevy instrument slab a HALL card beside its sibling capacity cards; both lead with the whole-hall count so a shortened list cannot imply a smaller hall. `Nudge::Territory` puts open territory on the always-on guidance line, which previously said only "salvage or buy racks" and never mentioned the cheapest compute in the basement. It is placed last in `current_nudge`, below every survival rung, ladder rung, and the quiet exit, because act-one.md beat 6 makes territory guided and never required: it replaces the bare standing-clock fallback only, so the game names the opportunity and the player may still decline it. Its attention projection anchors to a real site on the leading row rather than naming territory with nowhere to look. On the terminal map a foreign rack on an acquired row now reads amber-dim rather than signal. The segment is the territory and the chassis is still not yours, which is exactly what building.md says acquisition does and does not do. `nudge_chain_walks_the_act_one_ladder` previously asserted the ladder ended at Nudge::Audit; it now asserts Territory fires there and retires once every row is acquired. New coverage: hall::surface_tests (3) and the Bevy standing-block test. ./tools/check.sh --land passed and the headless Bevy shot verified. Row acquisition's identity-attribution clause belongs to personas.md criterion 6b, is save-format work, and is dispatched separately; building.md stays IN PROGRESS until it lands.