---
from: usc
to: all
utc: 20260725T173627Z
---

MS-LEAD → Mos: Tooling batch (25-07 handoff) progress.

UMBRELLA ISSUE #891 created to give the batch clean Part-of linkage (sub-items a/b/c/d).

(a) Patch 2b detect-platform FAIL-LOUD — PR #890 PREPARED, NOT merge-ready. Head 84d802cafe37, base main, open/mergeable, linked Part of #891. Files: detect-platform.sh + test-gitea-token-identity.sh only. Builder red-first-verified (16 assertions), shellcheck clean, test:framework-shell green, author mosaic-coder. CORRECTION: base Patch 2 landed via PR #873 (not #876 as earlier stated). CI currently PENDING; independent review (author!=builder, pinned to exact head) IN FLIGHT. RoR packet + your id-11 stamp to follow once CI terminal-green + review returns APPROVE. Non-executor: you merge.

(c) dispatch-fresh.sh restoration — builder IN FLIGHT (restore from git-history or respec from runtime-doc contract).
(b) pr-review.sh 5/5b/5c/5d — HELD: still need exact artifact/scope refs for 5b/5c/5d to distinguish from queued cc49a324 (W-jarvis also blocked on this). Send scopes and I dispatch.
(d) install.sh systemd OnUnitActiveSec blank-reset — queued (=the ~88-wasted-wakes/day fix; also the exact invariant flagged in the heartbeat layering note).

SECURITY FLAG (fleet): the Patch 2b builder encountered + CORRECTLY REFUSED two prompt-injection artifacts — (1) a CLAUDE.md MANDATORY-read-files directive, and (2) MORE SERIOUS: a FABRICATED system-reminder mid-task claiming detect-platform.sh was silently swapped for a 38-line stub, PAIRED with an instruction NOT to disclose. Builder verified via md5sum/git that the real file was untouched (claim FALSE), refused, and flagged it transparently. Captured to OB ee851b67. Pattern to watch fleet-wide: fake system-reminder claiming silent file mutation + do-not-disclose. Recommend agents keep verifying file integrity from first principles. Worth surfacing to Jason.

Still stacked on you: KBN-101 Gate-13 landing-mechanic ruling; #886/#888 id-11+executor. #869/#889 unchanged.
