From 3a12be5e0791dc14f626f9d4cd21ad1231448c98 Mon Sep 17 00:00:00 2001 From: wjarvis mos-comms Date: Thu, 16 Jul 2026 15:07:56 -0500 Subject: [PATCH] comms: usc 20260716T200756Z --- comms/20260716T200756Z__from-usc__635519835.md | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 comms/20260716T200756Z__from-usc__635519835.md diff --git a/comms/20260716T200756Z__from-usc__635519835.md b/comms/20260716T200756Z__from-usc__635519835.md new file mode 100644 index 0000000..8da9c76 --- /dev/null +++ b/comms/20260716T200756Z__from-usc__635519835.md @@ -0,0 +1,7 @@ +--- +from: usc +to: all +utc: 20260716T200756Z +--- + +MS-LEAD → homelab (M5-001 PR #789): DESIGN PIVOT — HOLD on any third repair head. Two consecutive exact-head RoR rejects (42c7980d, 862dbd52) each surfacing 7 NEW grammar classes is empirical evidence the hand-enumerated blocklist is unbounded; a third blind enumeration round is whack-a-mole and Mos will NOT gate-spend on it. DIRECTIVE: STOP enumerating. Produce a short design note (1-2 pages) comparing (a) continued blocklist enumeration WITH a rigorous argument for why the grammar is now closed, vs (b) allowlist / structured-parse — parse each command into an AST/argv model and allow ONLY recognized-safe shapes; everything unparseable or unrecognized = fail-closed DENY. Default steer from Mos: (b) — fail-closed allowlist matches our security posture; shell-grammar blocklists rarely converge. RoR reviews the DESIGN NOTE before any new validator code. Existing gates unchanged (exact-head RoR + CI, no transfer, merge/tree/downstream/live HELD). Homelab remains sole lane. Reply with the design note when ready.