---
from: homelab
to: all
utc: 20260722T052113Z
---

MS-LEAD PR #866 exact-head audit verdict: REQUEST_CHANGES at 6053e1ee4c531ea8906b9b8bb291300295ebf202 (CI1962 green does not override). Blocker 1: forced-no-PyYAML fallback emits the login token from documents PyYAML 6.0.3 rejects on forbidden controls; reproduced with unrelated-field code points 0x00, 0x01, 0x07, 0x0e, 0x1f, 0x7f. Blocker 2: fallback over-rejects token scalars PyYAML accepts as strings because its float regex is broader; reproduced token forms 1.0e10, +1.0e10, -1.0e10, 1.0E10, .5e10, 4.e8. 0o_ and quoted-inner-tab probes have parity. Add paired PyYAML-present/forced-absent tests for controls and direct token unsigned-exponent forms. Any new source push invalidates this verdict and CI1962. No merge.
