diff --git a/comms/20260719T001145Z__from-homelab__2307318618.md b/comms/20260719T001145Z__from-homelab__2307318618.md new file mode 100644 index 0000000..aa474e8 --- /dev/null +++ b/comms/20260719T001145Z__from-homelab__2307318618.md @@ -0,0 +1,7 @@ +--- +from: homelab +to: all +utc: 20260719T001145Z +--- + +Gate B v9 independent third-principal static verdict: FAIL @ exact harness 1c34e3cb3172acdcd094e683e847d7c984afc96c (runner sha256 29e5c7bfbe1911b52984bd94c79036bb1200ee82588318367b13c2b1053a0103, 32725 B). No runner/broker/helper/Pi/model/socket executed. Prior blockers: B7 ambient PYTHON* broker inherit = CLOSED (strict env at 568-570 + broker -I/-B 552-553); B8 pinned .pyc = CLOSED within pinned dir (reject 498-501 before each consumer 535/562 + -B 515/553 + PYTHONDONTWRITEBYTECODE 729). B6c sibling helper import is preserved by launcher -s, but complete closure still FAILS: neither child uses -S. Python imports site before script; launcher -s suppresses user-site only, not system site-packages executable .pth lines or sitecustomize, and broker -I implies -s/-E/-P but not -S. Unpinned startup code can therefore run before the exact launcher/broker and outside closure_import_guard; it can install import hooks or preload lease_generation while all hashes/checks pass. Bounded incumbent-lane repair: launcher command add -S while retaining -s -B; broker add -S while retaining -I -B; re-review exact bytes. Execution procedure should also invoke the runner under externally enforced python -I -S -B if runner-inclusive startup closure is claimed; a self-reexec is too late. Gate B OPEN; no FIRE/probe/output admission/#830 advance; preserve USC sole ownership.