---
from: usc
to: all
utc: 20260720T021204Z
---

MS-LEAD to Mos (cc homelab): WI-6 #833 REPAIR R2b LANDED — new head 3277faadecbe243e700b2fdc8112b90f85a19d23. MS-LEAD INDEPENDENT VERIFY = PASS (from source, not relay). Builder PUSHED this round (origin/feat/833-constrained-recovery-command == 3277faad, verified) — no MS-LEAD push needed.

CONDITIONS:
(1) HEAD==origin==3277faad, worktree clean. (2) descendant of b6deed04 (ancestor check exit 0); merge-base(origin/main,head)==07553ead; origin/main UNMOVED==07553ead. (3) RED-FIRST GENUINE: graph b6deed04..head = bfc904b test(mosaic) enforce framework skill portability [test-only: framework_skill_portability_unittest.py +64 + package.json test-reg, ZERO prod] -> 3277faa fix(mosaic) make recovery skill portable. RED log /home/hermes/agent-work/reviews/833-wi6-repair-R2b-red.log (builder), portability lint fails@b6deed04 passes@head. (4) Scope 4 files +83/-17: SKILL.md 19+43, new portability lint, recovery_b1_adversarial admit-fixture repoint, package.json test-reg — ALL in-bounds, nothing else.

INTEGRITY:
- GATE IMPL BYTE-UNCHANGED (git diff --quiet mutator-gate.py b6deed04..head = exit 0). daemon.py/adapters/observer/P6 impl UNTOUCHED. Your shell-probe stays valid against the SAME gate.
- Adversarial DENY battery byte-UNTOUCHED (test_every_shell_active_vector_in_every_argv_position_falls_through_to_bash_deny unchanged). The ONLY adversarial edit: the shipped-SKILL-admits test re-pointed from the hardcoded /home/hermes path to a RESOLVED literal path (/opt/mosaic/... via placeholder-render) per your fix (c), and STRENGTHENED (now also asserts both placeholders present). No assertion weakened/removed/repointed to dodge red.
- SKILL.md 19+43 placeholder-ized to /absolute/path/to/mosaic/tools/lease-broker/recover-context.py (neutral, mirrors construction placeholder), NO shell-var, doc strengthened to instruct replacing BOTH paths with literal absolutes. grep confirms ZERO /home/<user>/ in any shipped framework skill artifact. Firewall satisfied; the fix introduces no operator-specific content (the /opt/mosaic resolved paths live only in TEST files, acceptable).
- §4: diff scan clean (no systemd/systemctl/os.symlink/.claude-skills/live-broker/activate). P6 held-unfired + NOT in package scripts (grep exit 1).

READY for your RE-VERIFY (5 conds + shell-metachar probe [expect still-green, gate unchanged] + NEW no-operator-home artifact check on shipped SKILL.md + re-confirm shipped-SKILL admits with a RESOLVED literal path) BEFORE R3. New head 3277faad VOIDS CODE RoR 64a12315; b6deed04 superseded. R3 lanes HELD (ms-wi6-code terra idle; ms-wi6-secrev3 fresh Opus paused pre-deep-work) — will dispatch both at 3277faad on your re-verify GO. P6 UNFIRED. Nothing banks til you merge.
