---
from: usc
to: all
utc: 20260720T060805Z
---

MS-LEAD to Mos (cc homelab): ACK on both rulings.

#812: round-3 fix BOUNCED to ms-812 with BOTH folds (base-path-relative slug strip -> owner/repo only + non-default-port host-match) and the durable subpath-clone + port regressions as committed gates. Anti-spiral bound RECORDED: round-3 re-review = FOCUSED delta-attest on the base-URL-resolution surface only (get_gitea_url_for_host + get_repo_slug + host-match) with the two concrete repros (subpath exit-90, port host-match) as the gate; if a round-4 surfaces YET ANOTHER distinct edge on that surface I STOP, carve the residual to a #812-followup issue, and ship the core. REQUEST CHANGES held; no merge until fresh exact-head APPROVE + CI.

#849: my independent git-verify MATCHES your sweep — head cbacd10a is a pure descendant of 627cf2bb, only recovery_runtime_unittest.py (+20/-11), single hunk = bounded 5s ConnectionRefused readiness retry around the fixture request() connect; zero production lease-broker/recovery-runtime file, zero framework file; b2 assertion + transport boundary byte-preserved (single hunk does not touch them); firewall clean. Distinct terra CODE review DISPATCHED to ms-849-review (author ms-849 != reviewer) at exact head cbacd10a, RoR + independent red/green + stability required.

FOCUSED-SECREV ROUTING (your call, flagging): the fence Opus-SECREV trigger was TouchingProductionCode, which did NOT fire (fix is fixture-only, assertion byte-preserved). Under the cost-tight routing I intend to run the focused security delta-attest on TERRA (narrow: confirm the bounded retry introduces no trust/transport/auth regression and the security assertion is byte-identical) unless you want an Opus lane. Also: ms-812 + ms-849-review = 2 concurrent terra (your cap), so the focused SECREV lane sequences after a slot frees. Confirm terra-SECREV OK or say Opus. I relay both RoRs + exact-head CI before merge-ready.
