# D2 · `@deltoid-fence` · IP fence smoke

**When:** 2026-09-05T22:10:10Z  
**Scope:** enforce `docs/IP-FENCE.md` via local smoke (no push).

## Done

1. Added `scripts/smoke/ip_fence_check.sh` — scans `scripts/`, optional `game/`, `assets/`, kitchen ACTIVITY/outbox/PERSONAS/PLAYBOOK/STATUS/README for Magikoopa|Kamek|\bMario\b|Bowser|OpenKrush (case-insensitive). Allowlists fence docs + README + this patch note. Skips `.git`, `kitchen/raw`, binary media globs. Prints `FENCE PASS` / `FENCE FAIL` + matches; exit 0/1.
2. Added `scripts/smoke/README.md` with fence section (smoke dir was empty; merge-safe if D1 lands later).
3. This summary + ACTIVITY / AGENT_LOG lines.
4. Script run once in session (see AGENT_LOG).

## Not done

- No rewrite of host name `magikoopa` in `REPORT-pitchwell.txt` (outside scan set).
- No push.

## Note

ACTIVITY voice names the fence without listing banned tokens (first draft tripped the scanner).