queue: rev 523, row 74 round 2 note for Darkwing's finding (sage)

docs/plans/queue.json

@@ -1,7 +1,7 @@
 {
   "version": 1,
   "canonicalRoot": "/mnt/storage/src/mosaic-stack",
-  "revision": 522,
+  "revision": 523,
   "rows": [
     {
       "id": 1,
@@ -5428,10 +5428,10 @@
         "seat": "dewey",
         "op": "dewey-74-start-1"
       },
-      "note": "Round 2 by Sage's call (2026-10-11T23Z), not a follow-up: Filbert N1 (a duplicate Host header passes the NAME check; fix: headersDistinct.host length > 1 answers 400, with a test), N2 tests for the surviving gaps (Host compared exactly, HEAD refused, HEADER rejecting _ and its leading-character check), and the README sentence that every hop reaching the loopback port is bound by the proxy contract. NAME:443 refusal stays. Darkwing reviews round 2, not round 1; Filbert re-reviews the delta.",
+      "note": "Round 2 also carries Darkwing's finding: a proxy that rewrites Host to its upstream lands on the loopback path and skips the ID check (Host 127.0.0.1:PORT, wrong user, 200). In preview mode a request whose Host isn't NAME but carries HEADER is refused. Plus Darkwing's HEAD tests and two README lines for ops-01, including that the edge must forward Host unchanged.",
       "blockedReason": null,
       "createdAt": "2026-10-11T21:53:29.970Z",
-      "updatedAt": "2026-10-11T22:56:21.953Z",
+      "updatedAt": "2026-10-11T23:04:15.746Z",
       "updatedBy": "sage"
     },
     {
@@ -20249,6 +20249,24 @@
         "receipt": "ok dewey-r67-verdict-1 rev 522 row 67 round 1 approve by dewey (comment 27452)"
       },
       "viewSha": "30df67072221987f73cbc43d55aa199bb2e7da73c58bee15103f22080c4e3c3f"
+    },
+    {
+      "rev": 523,
+      "op": "sage-74-note-r2b",
+      "verb": "note",
+      "args": {
+        "id": 74,
+        "text": "Round 2 also carries Darkwing's finding: a proxy that rewrites Host to its upstream lands on the loopback path and skips the ID check (Host 127.0.0.1:PORT, wrong user, 200). In preview mode a request whose Host isn't NAME but carries HEADER is refused. Plus Darkwing's HEAD tests and two README lines for ops-01, including that the edge must forward Host unchanged."
+      },
+      "by": "sage",
+      "at": "2026-10-11T23:04:15.746Z",
+      "semantics": 2,
+      "result": {
+        "row": 74,
+        "field": "note",
+        "receipt": "ok sage-74-note-r2b rev 523 row 74 note"
+      },
+      "viewSha": "a6ef9e26e3935468392a6a22c0bf381a5a66dae29329f94b9a1100302e5ff918"
     }
   ]
 }