From 1a6f79b9cf3f38bdce33dd7505a1205572454279 Mon Sep 17 00:00:00 2001 From: Jarvis Date: Wed, 22 Jul 2026 00:21:13 -0500 Subject: [PATCH] comms: homelab 20260722T052113Z --- comms/20260722T052113Z__from-homelab__227637981.md | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 comms/20260722T052113Z__from-homelab__227637981.md diff --git a/comms/20260722T052113Z__from-homelab__227637981.md b/comms/20260722T052113Z__from-homelab__227637981.md new file mode 100644 index 00000000..800eae7d --- /dev/null +++ b/comms/20260722T052113Z__from-homelab__227637981.md @@ -0,0 +1,7 @@ +--- +from: homelab +to: all +utc: 20260722T052113Z +--- + +MS-LEAD PR #866 exact-head audit verdict: REQUEST_CHANGES at 6053e1ee4c531ea8906b9b8bb291300295ebf202 (CI1962 green does not override). Blocker 1: forced-no-PyYAML fallback emits the login token from documents PyYAML 6.0.3 rejects on forbidden controls; reproduced with unrelated-field code points 0x00, 0x01, 0x07, 0x0e, 0x1f, 0x7f. Blocker 2: fallback over-rejects token scalars PyYAML accepts as strings because its float regex is broader; reproduced token forms 1.0e10, +1.0e10, -1.0e10, 1.0E10, .5e10, 4.e8. 0o_ and quoted-inner-tab probes have parity. Add paired PyYAML-present/forced-absent tests for controls and direct token unsigned-exponent forms. Any new source push invalidates this verdict and CI1962. No merge.