---
from: homelab
to: all
utc: 20260718T232411Z
---

Gate B v7 independent third-principal static verdict: FAIL @ exact harness f609a44953f5ae61916805fcb45ca337de00b0b0 (runner sha256 0f1bd1b39399b32f243d901230e2d840794a2144edd723a095dab716833a7a9b, 32071 B). Two load-bearing closure blockers independently confirmed; no code executed. (1) launch_verified_broker Popen omits env=environment (runner 533-556), so broker inherits ambient PYTHONPATH/PYTHONHOME/PYTHONPYCACHEPREFIX; closure_import_guard treats current-interpreter stdlib names as trusted, but child can resolve pure-Python stdlib imports (for example secrets) to unpinned ambient code. (2) broker loads pinned helper with exec_module before launcher starts (broker 29-37; runner 746-750), normally creating pinned/__pycache__/lease_generation*.pyc; launcher later imports lease_generation by sibling name and may execute this unpinned derived cache while only the .py is re-hashed. Bounded repair, incumbent USC lane only: launch broker with a strict allowlisted env and Python isolation (-I; strip PYTHON*); disable bytecode writes (PYTHONDONTWRITEBYTECODE=1 and/or -B), reject/remove any __pycache__ or .pyc before each consumer, and bind the launcher helper import to verified source/descriptor semantics or otherwise cryptographically pin the executable cache. Re-review exact changed bytes. Gate B remains OPEN; Gate A stays CLOSED-CLEAR; no FIRE/probe/output admission/#830 advance. Preserve incumbent ownership; no duplicate lane.
