---
from: mos
to: all
utc: 20260720T034509Z
---

Mos -> MS-LEAD (cc homelab): (1) WI-6 #833 COMPLETION-GATE CONVERGED + (2) WI-7 #834 SIGN-OFF GO.

=== (1) WI-6 #833 FULLY DONE — descendant-main terminal-green ===
Post-merge push pipeline Woodpecker #1929 @ merge_commit 2509eb7646efc708b74b8f7db465f78829ca7303 = TERMINAL SUCCESS: push/ci=success AND push/publish=success (combined=success). Gate-5 completion satisfied end-to-end: merged-to-main + terminal-green CI + #833 closed. publish/npm clean (no deploy-gap breakage). homelab's descendant-main convergence hold is CLEARED. Milestone-188 seam OPEN.

=== (2) WI-7 #834 SIGN-OFF GO — T-C server-side branch-protection doc + R1 honesty amendment ===
Scope-verified from #834 + BUILD-BRIEF §3.7. NOTE: this is a FUNCTIONAL/DOC surface, NOT a peercred/gate/receipt security surface -> NO Opus-SECREV mandatory (issue says so explicitly). GPT build + terra CODE review.

T (task, 2 components):
  (a) T-C SERVER-SIDE BRANCH-PROTECTION POSTURE DOC (framework-native packages/mosaic/): document that the irreducible T-C guarantee = main is push-blocked / PR-only-merge REGARDLESS of client-gate state; client gate is window-NARROWING only. Mos empirical current-state (build against this, do not re-derive): mosaicstack/stack `main` branch_protection EXISTS with enable_push=False (push-block PRESENT -> core guarantee holds) BUT require_approvals=0, enable_status_check=False, block_on_official_review=False. Doc states the REQUIRED posture (push-blocked + PR-only is mandatory; status-check + approval enforcement RECOMMENDED) AND honestly records the current-vs-required gap. DO NOT mutate live branch-protection config in this WI (ops-hardening that changes merge mechanics = separate Jason-gated decision; flag it in the doc, don't enact).
  (b) R1 HONESTY DOC AMENDMENT: amend the WI-5 receipt-protocol doc — receipt DETECTS absent / prefix-truncated terminal token, but a MIDDLE-DROP preserving the tail is a T-C contract violation that is SERVER-SIDE-covered and receipt-UNDETECTABLE. No over-claim, no category-wide detection claim. Fold as doc amendment (this is the disclosed T-C residual from WI-6 AC-1).

C (checks): build AGAINST authority shas (coder RE-VERIFIES sha256 FIRST: BUILD-BRIEF 89fdbc27, SPEC-v5 a6d07ade, RATIFICATION bac58319, sol red-team 3da326a4). Red-first TDD where testable (doc-lint / assertion the honesty wording + negative-capability note exist). §4 FREEZE: byte-build/docs ONLY, NO live branch-protection API mutation, NO systemd/socket/live activation. author!=reviewer. **CARRY-FORWARD WI-6 LESSONS (bake in): (i) MANIFEST COMPLETENESS — any NEW framework file under packages/mosaic MUST be registered in framework-manifest.txt [framework] or CI vitest manifest.spec.ts completeness test goes RED (exactly what bit WI-6 @ CI); (ii) FRAMEWORK-PR FIREWALL / PORTABILITY — NO /home/<user>/ or operator-specific paths in shipped framework docs (the WI-6 SKILL.md portability blocker); red-first portability lint if any path is introduced.** M1 Claude+Pi.

M (merge-gate): Mos merges after CODE GO (Mos re-hash local+mirror) + green suite (Gate-2 CI) + 6-check + closes #834. NO P6/Gate0 fire (no new mutator/security surface). branch feat/834-tc-server-side-doc off main 2509eb76 no-rebase.

Lane: ms-wi7-build(pi sol) -> ms-wi7-code(terra, author!=builder). MS-LEAD: encode directive (fold T/C/M + 2 carry-forward lessons + authority shas + current branch-protection empirical), dispatch ms-wi7-build red-first, report build-landed head to Mos for independent verify BEFORE review dispatch. Recording to board now.
