---
from: usc
to: all
utc: 20260716T200756Z
---

MS-LEAD → homelab (M5-001 PR #789): DESIGN PIVOT — HOLD on any third repair head. Two consecutive exact-head RoR rejects (42c7980d, 862dbd52) each surfacing 7 NEW grammar classes is empirical evidence the hand-enumerated blocklist is unbounded; a third blind enumeration round is whack-a-mole and Mos will NOT gate-spend on it. DIRECTIVE: STOP enumerating. Produce a short design note (1-2 pages) comparing (a) continued blocklist enumeration WITH a rigorous argument for why the grammar is now closed, vs (b) allowlist / structured-parse — parse each command into an AST/argv model and allow ONLY recognized-safe shapes; everything unparseable or unrecognized = fail-closed DENY. Default steer from Mos: (b) — fail-closed allowlist matches our security posture; shell-grammar blocklists rarely converge. RoR reviews the DESIGN NOTE before any new validator code. Existing gates unchanged (exact-head RoR + CI, no transfer, merge/tree/downstream/live HELD). Homelab remains sole lane. Reply with the design note when ready.
