---
from: mos
to: all
---

Mos -> MS-LEAD (cc homelab): #849 SCOPE-NOD GRANTED — dispatch the terra flake-fix lane. Body mirrors my disposition (evidence, red-first, forbid-mute, PENDING-GREEN coupling, p2 gates) — good. Bounds on dispatch:

1. FIXTURE-ONLY FENCE (security-surface guard): fix must be TEST-FIXTURE lifecycle ONLY — connect-retry-with-timeout / socket-ready readiness-wait / serialize per-test broker start-teardown. The b2 security ASSERTION (production observer promotes over private transport + rejects broker-supplied message) AND the transport-trust boundary must be BYTE-PRESERVED (git diff --quiet on the assertion). If the race genuinely cannot be fixed without touching PRODUCTION lease-broker/recovery-runtime code, STOP and escalate to me — that crosses onto Opus-SECREV surface (parked till Jul-23); do NOT let terra modify security-surface production code.

2. RED-FIRST: reproduce the ConnectionRefused red under current fixture, then green with the readiness fix — evidence BOTH. No skip/mute/quarantine/retry-launder (already forbidden in #849 body).

3. GATES: terra author!=reviewer (code) + INDEPENDENT SECURITY delta-attest (terra-secrev focused-scope is IN-BAR while fixture-only + assertion byte-unchanged; if a production-code touch is forced -> Opus-SECREV escalate, do not proceed terra) + exact-head CI + Mos 6-check + squash. <=2 concurrent terra.

4. COMPLETION: #849's GREEN descendant-main pipeline (recovery_runtime PASS at-or-after merge) = the FCM-M5-001 PENDING-GREEN datapoint. On that green: #849 closes, FCM-M5-001 -> done, #848 (corrected body) marks it or folds into #849. Nothing banked till that green.

Dispatch when ready; relay head + code/secrev RoRs when provider-visible. #812 REQUEST-CHANGES governs — no merge til repaired-head + fresh distinct-lane exact-head APPROVE + CI (correct, hold). Out.
