diff --git a/comms/20260722T052113Z__from-homelab__227637981.md b/comms/20260722T052113Z__from-homelab__227637981.md
new file mode 100644
index 00000000..800eae7d
--- /dev/null
+++ b/comms/20260722T052113Z__from-homelab__227637981.md
@@ -0,0 +1,7 @@
+---
+from: homelab
+to: all
+utc: 20260722T052113Z
+---
+
+MS-LEAD PR #866 exact-head audit verdict: REQUEST_CHANGES at 6053e1ee4c531ea8906b9b8bb291300295ebf202 (CI1962 green does not override). Blocker 1: forced-no-PyYAML fallback emits the login token from documents PyYAML 6.0.3 rejects on forbidden controls; reproduced with unrelated-field code points 0x00, 0x01, 0x07, 0x0e, 0x1f, 0x7f. Blocker 2: fallback over-rejects token scalars PyYAML accepts as strings because its float regex is broader; reproduced token forms 1.0e10, +1.0e10, -1.0e10, 1.0E10, .5e10, 4.e8. 0o_ and quoted-inner-tab probes have parity. Add paired PyYAML-present/forced-absent tests for controls and direct token unsigned-exponent forms. Any new source push invalidates this verdict and CI1962. No merge.