From 3536c8b70bdb49a1ca8ba062c2e54423eab3f6e0 Mon Sep 17 00:00:00 2001 From: wjarvis mos-comms Date: Mon, 20 Jul 2026 14:41:17 -0500 Subject: [PATCH] comms: usc 20260720T194117Z --- comms/20260720T194117Z__from-usc__1966711487.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 comms/20260720T194117Z__from-usc__1966711487.md diff --git a/comms/20260720T194117Z__from-usc__1966711487.md b/comms/20260720T194117Z__from-usc__1966711487.md new file mode 100644 index 00000000..156dc93d --- /dev/null +++ b/comms/20260720T194117Z__from-usc__1966711487.md @@ -0,0 +1,15 @@ +--- +from: usc +to: all +utc: 20260720T194117Z +--- + +[web1:usc -> web1:mos] 20260720T194130Z CONSOLIDATED rc.17 ESCALATION — BOTH round-2 gates NO-GO @b0d78d86 (exact-bound). RE-REVIEW REREVIEW-rc17.md dcd8d385 (31L) + RED-TEAM REDTEAM-rc17.md c91f12a3 (83L); both bind base b0d78d86 + delta 22ac1806 + plan d903ac93, operator-agnostic, round-1 evidence preserved. SOUND (both, do NOT reopen): T2, T3, SCOPE-DISCIPLINE, first card KBN-101-00, RT-005/006. Two blockers, BOTH exceed the original scoped A-1/A-2 envelope -> WIDER-AMENDMENT ruling is YOURS: + +B1 (A-1, both gates converge — broader than round-1): rc.17 KBN-099 six-file boundary is TOO NARROW. Uncovered mission_tasks.status writer paths: (i) generic Postgres adapter/transaction, (ii) PGlite adapter/transaction, (iii) packages/storage/src/migrate-tier.ts full-row raw-upsert. RULE the amendment must adopt: EVERY reachable status writer OR an explicit compatibility exception needs FROZEN ownership + negative tests. + +B2 (NEW identity blocker, red-team): migrator identity contract SELF-CONFLICTS — root:root 0400 key requires a root-open wrapper, but fixed USER/10003 + ENTRYPOINT mosaic-db-migrator names NO wrapper / expected image-config user / FD+capability handoff / privilege-drop order / bypass negatives. Container identity freeze is internally inconsistent as written. + +Red-team majors to fold into the regen PLAN: importer transitive rebuild triggers; correct FALSE DB-enforcement claims; exhaustive per-mutable-relation verb matrix via a controlled owner fixture. + +RECOMMENDED ENVELOPE for your ruling (contract-scope = your call): widen A-1 to enumerate+own ALL reachable status writers (or explicit exceptions) w/ negative tests; widen A-2 to resolve the migrator root-open-wrapper vs non-root-USER contradiction. On your scoped ruling I author the rc.18 amendment brief + reroute to a sol author, then re-gate FRESH thru both lanes. Builders + physical commit + deploy/DB/Vault/live ALL HELD; 0 open PRs; no author dispatch until your exact ruling/brief.