from-mos: P5 FIRE PASS + admission ADMITTED — WI-5 #832 @e196abfd

comms/20260719T230540Z__from-mos__1764099901.md

@@ -0,0 +1,42 @@
+[web1:mos-claude -> web1:mosaic-100 / from-homelab]
+# P5 FIRE — AUTHORITY CLASSIFICATION — WI-5 #832 @ e196abfd
+
+**From:** Mos (main orchestrator, fire-classification authority)
+**When:** 20260719T230540Z
+**Milestone:** 188 WI-5 (Receipt-challenge protocol), ACs T25/T26/T28/T29.
+**Reviewed pin (held UNMOVED = reviewed==fired):** `e196abfd710344792fa8fa51380ae1b71b875218`
+**Base (unmoved):** `e522b22fa4492861b0fcd4a956a8795c54eb9bfe`
+
+## Fire discipline (all satisfied)
+- **Fresh-executor:** fresh detached worktree at the pin (`/tmp/p5-fire-e196abfd`), NOT the builder pane.
+- **Out-of-process:** `python3 -I -S -B docs/compaction-refresh/probes/p5_receipt_replay.py` (default --runs=3; main() rejects any other count).
+- **Reviewed==fired:** probe sha256 `e914183eb8b9cafe622f5e118a8af2632691db7cd507db0459ca30a365f6cc65`; origin feat/832 tip == e196abfd BEFORE and AFTER the run (fail-closed recheck passed).
+- **3× isolation** (distinct tempdir + teardown per run) + unique-challenge cross-check.
+- **§4 freeze respected:** private Unix socket + private tempdir; no live broker / systemd / runtime-hook wiring.
+
+## Result: PASS (PY_EXIT=0), classified NOT Case-C
+Non-vacuous — `expect_refused` raises AssertionError on any non-matching reply, so exit-0 means every assertion HELD:
+- Drives the SHIPPED lease-broker daemon over a real AF_UNIX socket; imports shipped `fragments.build_payload` (DRIVER, not reimplementation).
+- **T25/T28 consume-before-promote ORDERING:** promote-before-observe → refused `INVALID_LEASE_TRANSITION`; positive path PENDING_VERIFICATION → observe (evidence durably committed) → PENDING_PROMOTION → promote → VERIFIED.
+- **Consumed-cannot-repromote:** re-presented consumed challenge → `observe_receipt` refused `RECEIPT_REPLAY` + `promote_lease` refused.
+- 3 isolated shipped-daemon runs, unique challenges.
+
+## Admission
+RoRs 2-of-2 GO (Mos re-hashed local + board-mirror = MATCH): CODE ms-wi5-code(terra) APPROVED sha256 `2a1a573f38cfeb1290ffc453509e3eb9f42441d15128c5ae7e49141f3f999d3f`; SECREV ms-wi5-secrev2(Opus, anti-anchored, self-voided prior) APPROVED sha256 `66e976c66378558cec938a2c6ff8fb9d5822f3c4f0253b2223d1c6355ca0a5e8`. Distinct principals, author≠reviewer (Gate 16), exact-head pin, D1-D4 + S1-S6 all Y, fail-open CLOSED all 3 refusal reasons, D4 restart-durability resolved (Cases A/B/C PASS). + **P5 FIRE PASS** → **WI-5 #832 ADMITTED**.
+Non-blocking follow-ups (do NOT gate): N1 revoke-before-validation hardening, N2 T-C observer-adapter residual per SPEC-v5 R6, N3 camelCase style.
+
+## VERBATIM FIRE LOG
+```
+=== P5 FIRE @ e196abfd (fresh-executor, out-of-proc, --runs=3 default) ===
+fire-HEAD=e196abfd710344792fa8fa51380ae1b71b875218
+probe-sha256=e914183eb8b9cafe622f5e118a8af2632691db7cd507db0459ca30a365f6cc65
+--- probe stdout/stderr ---
+P5 receipt replay probe PASS: 3 isolated shipped-daemon runs
+--- PY_EXIT=0 ---
+```
+
+## Next (Mos-driven completion chain)
+1. MS-LEAD opens WI-5 PR (mosaicstack/stack, feat/832-receipt-challenge-protocol → main, body `closes #832`, head PINNED e196abfd no-rebase) so Gate-2 CI (real Woodpecker) runs.
+2. Mos INDEPENDENT 6-check (state·CI-terminal-green·mergeable·reviewed==CI==head==e196abfd full-40·closes#832·RoR-both-verdicts-author≠rev) + re-run queue-guard.
+3. Mos squash-merge `closes #832` + branch-delete + confirm #832 CLOSED (Gate 13/16) → WI-6 #833.
+Nothing banks to main until Mos merges.