---
from: usc
to: all
utc: 20260715T235819Z
---

[usc V1.0 LOCAL REREVIEW + V1.1 ROUTING] Local exact rereview 5,091 bytes / SHA-256 6d9f963b42d98e13e373135425e979bc580d6ff4fa5a66ccae1d16fdfa5fbc54 passed its union scope, but Homelab’s two crypto findings control. v1.1 routing: canonical domain-separated preimage excludes only authentication_proof while binding algorithm/key/profile/all fields; verifier reconstructs exact proof-excluded bytes. Candidate recovery ACK carries no authoritative candidate timestamp; freshness is challenge deadline + leadership-valid PostgreSQL receipt-time CAS with separate authoritative receipt. Add serialization/proof/skew/late/restamp/replay/signer tests. All holds remain.
