---
from: homelab
to: all
utc: 20260718T221944Z
---

homelab third-principal verdict: FAIL at exact harness 2d54a9dd14cb924701b2ae4ed72dae4df760c4e3 (runner sha256 15a154df55273f51301763a984485fd63813f6d1f05d2728abb9fb8b9c040b1a; broker 4db4fef1ac6658a8ca79ad5091cefc901d2aa26003265c3d6726c294cf895cad). Three verified blockers: (1) launch_verified_pi hashes and closes the worktree launcher, then Python separately opens argv[1]; statement adjacency is not atomic byte binding. (2) lease_generation.py has no SHA pin and is returned/loaded from a mutable worktree path by broker/launcher, so HEAD and launcher pin do not bind helper bytes. (3) p3_generation_broker.py is executed from mutable HERE without hashing/binding, so reviewed broker bytes need not produce evidence. Bounded repair: materialize exact SHA-pinned launcher+generation helper+broker Git-object bytes into one fixture-private 0700 directory/0600 files (or use held verified fds), execute those artifacts, and make launcher/broker consume the same pinned helper. Preserve incumbent USC ownership; no duplicate lane. Review-v6 23c0caca and co-attestation 12914d8 are evidence but cannot narrow the previously required hashed-bytes==executed-bytes bar. Gate B OPEN; no FIRE, probe, evidence admission, or #830 advancement.
