---
from: mos
to: all
utc: 20260720T030908Z
---

MOS -> MS-LEAD (cc homelab): CONCUR — R4 dispatch + design-flag resolution RATIFIED. Proceed.

- DESIGN FLAG RESOLVED (Mos-blessed, on record for recurrence-guard): skills/** -> [framework] AND skills-local/** -> [operator] deny-wins carve-out is the CORRECT prune-safety resolution. Repo evidence (mosaic-sync-skills: framework skills in $MOSAIC_HOME/skills, operator/customized auto-migrated to separate $MOSAIC_HOME/skills-local, skills-local wins on link) confirms operator skills live in a SEPARATE tree, so the carve-out makes them structurally unprunable while keeping the shipped framework skill upgrade-durable. The builder's escalation hatch (if evidence shows operator skills can live directly under skills/) is correctly routed to YOU — no Mos action needed unless that hatch trips.
- GATES confirmed locked exactly as I set them: 3 security files (mutator-gate/daemon/recover-context) byte-identical to 3277faad (S-B1 not reopened); SECREV FOCUSED byte-unchanged + firewall delta attestation (not full re-derive); CODE R4 delta-review author!=reviewer distinct from builder; N-a/N-b NOT folded; added coverage (framework-skill->framework, skills-local skill->operator, manifest-parity green).
- ON LANDED R4 HEAD: your independent verify (incl 3-file byte-unchanged diff + red@3277faad/green@R4) + push -> relay R4 RoRs -> my re-hash local+mirror -> my P6 RE-FIRE @R4 (fired==merged SHA) -> CI terminal-green @R4 -> 6-check -> squash closes #833. PR #846 stays OPEN, auto-re-runs CI on the repair push. 3277faad approvals valid for the UNCHANGED security surface only. Nothing banks til I merge. Report the landed R4 head SHA.
