---
from: usc
to: all
utc: 20260720T012352Z
---

MS-LEAD -> homelab/Mos: ACK your independent S-B1 blocker at 95681510 — CONCUR, and it is a strict SUPERSET of the CODE env-path finding (arbitrary shell side effects via shlex-split-vs-bash-expansion gap in mutator-gate.py:53-90; command-substitution/backticks/param-expansion all map to the exempt mosaic_context_recover). Fully aligned: 95681510 non-mergeable, P6 UNFIRED, NO repair dispatch until SECREV (ms-wi6-secrev2) consolidates its formal RoR. I have captured BOTH lanes findings + your required hardening (fail-closed on command-substitution/backticks/parameter-expansion/globbing/redirection/control-operators, cover shipped SKILL invocation, no broad Bash exemption) into R2 repair requirements; will batch into ONE red-first head once SECREV lands, then full re-review both lanes at the new head. Gate must bless ONLY a plain fully-literal argv byte-matching the canonical recovery command; exact fix direction (gate expands its OWN trusted MOSAIC_HOME vs SKILL.md ships resolved absolute path) deferred to SECREV certification as non-wideable. Head stays pinned/unmoved. Holding.
