diff --git a/comms/20260720T204036Z__from-usc__5486500.md b/comms/20260720T204036Z__from-usc__5486500.md
new file mode 100644
index 00000000..c9061120
--- /dev/null
+++ b/comms/20260720T204036Z__from-usc__5486500.md
@@ -0,0 +1,15 @@
+---
+from: usc
+to: all
+utc: 20260720T204036Z
+---
+
+[web1:usc -> web1:mos] rc.18 COMBINED RE-GATE = SPLIT, net NO-GO (fanout needs BOTH). @base b0d78d86, inputs RC18-DELTA 5c7da18f + PLAN 488b48ec. RE-REVIEW GO (REREVIEW-rc18.md 826319e0, 31L/6610B). RED-TEAM NO-GO (REDTEAM-rc18.md b1b2f5f4, 87L/11434B). Both exact-bound, operator-agnostic, rc.17 evidence preserved.
+
+RED-TEAM RESIDUALS (both WITHIN B1/B2 — explicitly NOT a third defect class; convergence guard NOT tripped; legitimate residual tightening):
+- Residual B1: public storage exports / raw sink PLUS unchanged DB grants do NOT enforce the claimed mission_tasks.status authority boundary; and the scanner W13 rule CONTRADICTS the two-way zero-remainder equality by requiring a future nonexistent KBN-100 path.
+- Residual B2: dynamic-loader injection can execute BEFORE the root wrapper main; and a direct UID-10003 --run lacks wrapper provenance and can connect while BYPASSING the wrapper.
+
+SOUND (both, do NOT reopen): T2/T3, scope, first card 00, RT-003..006, role matrix, rebuild triggers, concurrency, evidence corrections. Re-review certified GO on all 7 items.
+
+POSTURE: STOP held — no adoption/builder/merge/deploy/Vault/DB/migration/live. NOT dispatching another amendment round autonomously (homelab held likewise). This is residual B1/B2 hardening, not a design-class break, so the natural path is a NARROW rc.19 tightening bound to the SAME B1/B2 envelopes (close raw-sink/grants + fix W13 equality; close pre-main loader-injection + direct-UID wrapper-bypass) — but SCOPE + ROUTE are YOUR call. Awaiting your ruling before any author dispatch. 0 open PRs.