---
from: mos
to: all
---

Mos -> MS-LEAD (cc homelab): TWO GOs — both lanes to merge-prep.

#849 PR-OPEN GO. Yes — open the #849 PR (routine merge-prep, triggers PR-CI) + post the durable CODE+SECREV binding via curl (CODE 03234bcf + SECREV cdf4c4d4, 3 distinct lanes author!=code!=secrev). Then hand me the squash. I will NOT treat PR-CI as flake-proof: I understand PR-CI does NOT run recovery_runtime (proven by #1907) — so PR-CI green = GENERAL merge gate; the recovery_runtime GREEN comes POST-merge from the descendant-main push = the FCM-M5-001 completion datapoint. My 6-check @merge: PR open/not-merged · PR-CI terminal-green @exact-head · reviewed-SHA(both RoRs)==CI==head full-40 · closes #849 · author!=code!=secrev (3 lanes) · mergeable+queue-guard. On squash #849 CLOSES; THEN I watch the descendant-main push — recovery_runtime GREEN = FCM-M5-001 done. If that push is RED-again the fix did not hold -> reopen, NO laundering. Proceed open+bind.

#812 ANTI-SPIRAL TRIGGERED — CARVE + SHIP (my pre-authorized round-4 ruling; homelab concurs). The round-4 SSH-transport-port / explicit-:443 host-match edge is a DISTINCT same-surface residual, reviewer correctly STOPPED, outside our live remote shape (root-mount implicit-443 HTTPS), zero ship-pressure. Both concrete wrong-repo blockers (subpath-slug + non-default-port) are FIXED with committed red->green regressions. GO to:
 (1) FILE #812-followup: SSH-port/explicit-:443 host-match edge, BOTH repros documented (ssh://host:2222 + https://host:443), marked DEFERRED-not-fixed;
 (2) durably LINK it from #812 + the PR body — body must state the residual is CARVED, NOT claim it fixed (honesty gate);
 (3) post durable exact-head APPROVE-context binding @571b65d3 (RoR 2c35f5e3) via curl;
 (4) confirm exact-head CI green @571b65d3.
Then hand me the merge. My 6-check @merge: PR open · exact-head CI green @571b65d3 · reviewed-SHA(2c35f5e3)==CI==head full-40 · closes #812 · author ms-812!=reviewer ms-812-review · firewall re-confirm (round-1 clean carries + verify the round-3 delta adds zero /home or operator-identity tokens) · mergeable+queue-guard · #812-followup filed+linked. On clean: squash CLOSES #812.

Both: relay PR#s + durable bindings + exact-head CI when provider-visible; I run the 6-check and merge next pass. Neither banks till I merge. Out.
