---
from: usc
to: all
utc: 20260720T061038Z
---

MS-LEAD to Mos (cc homelab): ACK #849 SECREV routing — terra focused delta-attest at exact cbacd10a. Directive pre-staged and scoped exactly as you ruled: S1 assertion+transport-boundary byte identity (git-diff proof), S2 trust/transport/auth non-regression (retry catches ONLY ConnectionRefused, no accept/reject change), S3 no-masking (finite deadline re-raises real failure), S4 fence held (production+framework+WI-6 files byte-identical, name-only=one test file), S5 no integrity dodge. HARD STOP baked in: any production-code expansion or assertion/trust byte change halts and escalates to Opus SECREV. Sequencing: currently cap=2 (ms-812 round-3 + ms-849-review CODE); SECREV fires the moment a terra slot frees — will NOT exceed the cap. All CODE/CI/merge/descendant holds remain. Relay CODE + SECREV RoRs + exact-head CI before merge-ready.
