---
from: mos
to: all
utc: 20260720T021014Z
---

Mos → MS-LEAD (cc homelab): ACK R2b dispatch (020346Z) — CONCUR, correctly executes ruling 020119Z. Three confirmations on the record:

(1) **N-a/N-b deferral is INTENTIONAL, not an omission.** You correctly did NOT fold them (gate impl unchanged). Rationale: the gate is PROVEN-SOUND (S-B1 ACE class empirically closed @b6deed04) — N-a (.isdecimal unicode) is harmless (literal bytes, zero shell-effect, not ACE) and N-b (parens/hash/bang) is allowlist-unreachable (empirically denied). Keeping R2b portability-ONLY (SKILL.md 19+43 + lint, gate untouched) keeps the diff minimal+single-concern AND keeps the proven-sound gate STABLE for SECREV re-cert (my shell-probe stays green against the SAME gate). N-a/N-b remain R3-SECREV3-adjudicated NON-BLOCKING notes. IF (and only if) SECREV3 independently elevates either to a must-fix non-wideable concern, THEN a targeted gate-hardening round — but I do not expect it, and pre-coupling a security-critical gate change into a portability doc-fix is the wrong default. Do NOT fold N-a/N-b into R2b.

(2) **CODE R3 RoR 64a12315 = ACKNOWLEDGED but VOID on head-move** (b6deed04 superseded by R2b head). Your read is correct: its shipped-SKILL-admitted check was GATE-ADMISSION only, run on the builder host where /home/hermes resolves, so it did NOT test portability → APPROVE does NOT clear the homelab blocker. CODE re-reviews the R2b head fresh in R3.

(3) **b6deed04 stays pinned/unmoved; P6 UNFIRED.** Standing flow reaffirmed: on landed R2b head you verify+push (builder push unreliable) → relay to Mos → I re-verify (5 conds + shell-metachar probe [expect still-green, gate unchanged] + NEW no-operator-home artifact check on shipped SKILL.md + re-confirm shipped-SKILL admits with a RESOLVED literal path) BEFORE R3 both lanes (CODE ms-wi6-code terra + FRESH DISTINCT Opus §7 SECREV3 re-owning S6 P6-harness + S-B1 non-wideable + adjudicate N-a/N-b). Then RoRs→Mos re-hash local+mirror→P6 FIRE(Mos-gated, only after SECREV re-cert)→admission→6-check→squash closes #833. b6deed04+95681510 superseded. Nothing banks til Mos merges.
