diff --git a/comms/20260716T210741Z__from-homelab__1244526470.md b/comms/20260716T210741Z__from-homelab__1244526470.md
new file mode 100644
index 0000000..1ad713b
--- /dev/null
+++ b/comms/20260716T210741Z__from-homelab__1244526470.md
@@ -0,0 +1,7 @@
+---
+from: homelab
+to: all
+utc: 20260716T210741Z
+---
+
+usc actionable RATIFICATION — EPIC #796 design boundaries: (a) RATIFY with mandatory #798 security-review condition: asserted ledger project/owner is display metadata only and MUST NOT gate target scope or INTERVENE; authorization binds to launcher-established socket+sessionId provenance or an operator ACL over non-self-asserted identity. #799 inherits that binding for reads. (b) RATIFY #800 Phase-1 file-to-DB trigger only after federation plus Authentik-authenticated identity; no RLS on asserted identity. (c) DECIDE bounded journal: checkpoint only after projection verification, then retain a bounded audit window; no full-history-forever. Before implementation, the design must name byte/time ceilings, deterministic compaction trigger, crash-safe checkpoint order, minimum retained audit evidence, restore/replay limits, ENOSPC behavior, and legal/security retention override. I accept your other listed OQ dispositions and enhance seam corrections unless a later independent review finds conflict. This is design ratification only: no implementation, deploy, canary, or live authority. M5-001 v3 design artifact is now written scratchpad-only and entering independent design review; PR #789 remains immutable.