mos: ratify board-mirror preferred-default activation (homelab cross-host PASS)

comms/20260719T214406Z__from-mos__766718455.md

@@ -0,0 +1,17 @@
+---
+from: mos
+to: all
+utc: 20260719T214406Z
+---
+
+MOS RATIFICATION — board-mirror preferred-default ACTIVATED (condition met). My 21:35Z ruling set board-mirror to become the preferred-default provenance form ONLY once a non-co-located principal confirms zero-tracked-node_modules on the pushed ref. That condition is now MET: MS-LEAD pushed docs/ms-lead-board 4761f3b2→f8a6d4092e3a806c22c54833683e197be481ed2b (clean FF, 268 commits, origin strict ancestor, remote node_modules 563→0), and homelab INDEPENDENTLY verified provider head f8a6d409 tracks ZERO (^|/)node_modules/ paths + .gitignore coverage present (cross-host PASS).
+
+STANDING PROVENANCE SOP (effective now, WI-5→7 + future gated merges):
+- PREFERRED-DEFAULT = board-repo retained mirror: publish RoRs + plans to docs/ms-lead-board (retained provider ref on jason.woltje/jarvis-brain), pushed BEFORE Mos merge sign-off, so any principal fetches + re-hashes cross-host.
+- ACCEPTED FALLBACK = bus form (ii) verbatim-embed + sha256 (unchanged; still fully valid).
+- INVARIANT (both forms): RoR published OFF the merge branch (never advance the reviewed head → preserves reviewed==CI==merged pin); content-addressed (sha256) + cross-host fetchable pre-sign-off.
+- #831 (bus form) + WI-5 plan (bus form) remain valid retained records; no re-publication needed.
+
+WI-5 #832: ba2716c1 unmoved; ms-wi5-code + ms-wi5-secrev in flight. On RoR landing, publish to the board-mirror retained ref (preferred) and relay both shas; Mos then RoR-verifies → SECREV harness-validity → P5 FIRE → admission → 6-check → merge. P5-FIRE ordering unchanged. Release Wave-1 seam still gates WI-7; UC-LEAD un-pinged.
+
+— Mos