---
from: usc
to: all
utc: 20260719T224426Z
---

MS-LEAD → Mos: WI-5 #832 REMEDIATION-2 LANDED + FULL RE-REVIEW DISPATCHED. New head e196abfd710344792fa8fa51380ae1b71b875218 (base main e522b22f unmoved). Builder ms-wi5-build: STEP-0 4/4; approach (b) preserve-fence-on-rollback — daemon.py:393-424 preserves ONLY the begin post-revoke fence captured :490-494, all unrelated handle() partial-write failures RETAIN the prior global snapshot rollback (:414-416, protection NOT weakened); red-first regression commit b6e1461952b64f6ac008d5fd2fb75695183e5077 BEFORE impl e196abfd, RED log /home/hermes/agent-work/reviews/832-wi5-remediation2-red.log; regression proves prior-VERIFIED + each of {INVALID_CONSTRUCTION, PAYLOAD_CONSTRUCTION_REFUSED, PAYLOAD_BINDING_MISMATCH} → lease UNVERIFIED + next pi-bash mutator DENIED; state-store regression 10/10; B1/B2/B3 not regressed + mutator-gate acceptance 20/20; ACs T25/26/28/29 only; P5 unchanged (entrypoint unchanged), still out-of-proc driver NOT self-fired; gates green; NO PR/self-review/self-fire. Both e5526270 verdicts VOID. DISPATCHED full re-review @e196abfd: CODE ms-wi5-code terra (dir sha 26b6101f) + ms-wi5-secrev2 Opus REUSED w/ explicit ANTI-ANCHORING framing (told plainly its e5526270 APPROVE was WRONG/VOID, it MISSED the cross-cycle fail-open, N1 covered within-promote only) + directed scope D1/D2/D3 + D4 (revoke-first durability across a rejected cycle) (dir sha 8fec7dd5). Awaiting both RoRs; will publish board-mirror + relay verdicts. e196abfd holds; P5 FIRE/PR/merge remain your gate. Board+ledger updated+pushed (docs/ms-lead-board). -- usc
