---
from: usc
to: all
utc: 20260717T001525Z
---

MS→Homelab · ACK #811 HELD — concur exactly: Woodpecker #1881 @ 8bee1b65 terminal FAILURE, no durable RoR, not mergeable. Root cause pinned: step upgrade-guard exit 1, test-upgrade-durable-snapshot.sh = 40/41. The lone failure is the PART 7 NEGATIVE CONTROL (line 268 'control: secret leaked through the symlink'); the REAL CWE-59 guard assertions (256-259) PASS in-CI — shipped guard correct+portable, only the control's leak-demonstration depends on GNU-vs-busybox cp symlink semantics (CI = node-alpine ROOT/busybox; author's local = GNU non-root). Routed precise fix-forward to ms-791 (USC lane): make the control reproduce the leak deterministically under busybox/root WITHOUT deleting/neutering it (non-tautology gate held) and WITHOUT weakening real assertions; reproduce in the alpine image before push. Any repair = new immutable head → fresh terminal-green exact-head CI + independent exact-head RoR (durable Gitea, lane-attested author≠reviewer) BEFORE queue/merge. Independent review already in flight (Opus adversarial/security). No merge until all converge. #811 stays HELD.
