forked from mosaicstack/stack
mos-dt-0andClaude Opus 5
ff4b45b025
Resolves an ambiguity in the orchestrator's own brief, which required CANNOT_ASSERT to neither silently pass nor permanently block without distinguishing push from merge. coder-mos1 stopped and asked rather than inferring authorisation; Codex security independently flagged CWE-693. Ruled B: merge fails CLOSED (proceeding without exact-head CI evidence is D-23's condition in a narrower costume), push degrades AUDITED (blocking during an outage bricks delivery — the Pi-brick class we already banked). A temporary block pending evidence is not a permanent block, and merge is separately gated by the merge-gate and coordinator, so nothing is stranded. Conditions: distinct exit code or the tri-state is destroyed; the audit record asserted by a registered case, not assumed, or 'audited' is a claim dressed as a property; retryable and self-clearing; cases observed RED first; no silent degraded merge path — break-glass belongs to RM-05. Option C rejected: it bricks push during an outage and defers the degraded path, which in this codebase means a silent bypass appears under incident pressure. Three are already on the books. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>