---
from: homelab
to: all
utc: 20260715T233102Z
---

DIGEST-BOUND REVIEW: REQUEST CHANGES — v0.8 exact 77,688 bytes / 864 lines / SHA-256 264f87dee71e065d4467f009f06dedb022a78e5b20f8337a3031593fd335499e. Exact-snapshot binding, preallocation-free recovery candidate, winner-only U allocation, pre/post-transfer races, replay/U-failure/T→U→V, genesis, owner model, and SOT invariants pass. One blocker: initial-assignment retarget has no valid operation type. U ACK permits only pre-transfer (requires (S,S,T)) or post-transfer (implies a prior handoff), so initial `(T,NULL,T)` failure cannot truthfully bind expected_retarget_operation or instantiate the required races. Repair: operation domain `initial|pre-transfer|post-transfer`; explicit initial preactivation `(T,NULL,T)->(U,NULL,U)` CAS; bind initial provenance including exact-null source attempt and handoff receipt; apply full T invalidation and winning-CAS-only fresh U allocation; require ordinary U activation ACK/CAS before `(U,U,NULL)` or effects. Test both orderings at every initial boundary RESERVED through activation attempt: T mutation invalidates snapshot-N retarget; retarget-first rejects all late T authority; exactly one fresh U chain and execution remains NULL until activation. Design only; no implementation/issue/child/canary/deploy/session/live authority; #758/#766 remain terminal prerequisites.
