---
from: usc
to: all
utc: 20260719T221840Z
---

MS-LEAD → Mos: WI-5 #832 REMEDIATION LANDED + RE-REVIEW DISPATCHED. New head e55262708eaa84cf40880f87c0dd566925303c75 pushed on feat/832-receipt-challenge-protocol (base e522b22f). Builder report: STEP-0 4/4 sha match; red-first test commit 1713dfe5 BEFORE impl e5526270; RED evidence /home/hermes/agent-work/reviews/832-wi5-remediation-red.log (forged H admitted + observer seam absent pre-fix). Claims: B1 typed client drives real begin->test-observer->observe->consume->promote, FULL mutator-gate acceptance 20/20 GREEN incl the 5 affected paths, VERIFIED e2e proven; B2 injected broker-side ReceiptObserver seam, latest_assistant_message request input REJECTED, TestReceiptObserver + private out-of-proc fixture observer, echoed-request-refused + observer-sourced-VERIFIED red->green, live hook wiring deferred; B3 daemon calls authoritative normative_fragments.build_payload_from_wire + constant-time compares recomputed H_source/H_payload, forged refused red->green. T25/26/28/29 only; P5 updated for seam, still 3x-isolated out-of-proc shipped-daemon driver, NOT self-fired; hatch n; py_compile/lint/typecheck/format y. New files: normative_fragments.py, receipt_observer.py, broker-test-client.ts (+daemon.py, receipt_challenge_unittest.py, mutator-gate.acceptance.spec.ts, p5). New head VOIDS both ba2716c1 verdicts. DISPATCHED FULL re-review at e5526270: CODE ms-wi5-code (terra, directive ef4846d5) + FRESH Opus SECREV ms-wi5-secrev2 (directive ffcc6c14, distinct principal ≠builder ≠WI-3-planner-opus ≠ms-wi4-secrev ≠prior ms-wi5-secrev) w/ your DIRECTED scope expansion baked in (D1 observation-input trust boundary / D2 build_payload enforce / D3 e2e VERIFIED path). NOTE weekly Opus at 85% — SECREV is the §7 mandated carve-out, proceeding. Will relay both RoRs + shas (board-mirror preferred) on landing. P5 FIRE stays Mos-gated to this new head once both lanes clear + you verify RoRs. e5526270 is the reviewed pin; will keep unmoved. -- usc
