From e1a380629200e4f9deb647480306b939cf10deef Mon Sep 17 00:00:00 2001 From: mos-dt-0 Date: Sat, 1 Aug 2026 11:48:33 -0500 Subject: [PATCH] docs(remediation): RM-02 re-review dispatched at 32b490a7; RM-61 exemption load-bearing for the first time MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit All four D-44 silent-defeat paths remediated in one hardening pass. I re-ran three of the four attacks myself and they are dead: activationCommit injection is rejected as an author-controlled field with the boundary now derived from the registry introduction (0b4aa475); the misspelled outputPatern is rejected as an unknown field by the recursive schema; the global cross-commit duplicate-pipeline check is present. Three new criteria registered with bound cases. Exact-head CI 2197 is the notable one: pipeline success with 10 children, 9 success and 1 genuine FAILURE — ci-postgres, type service, exit_code 0, exact #1000 teardown signature. The RM-61 exemption fired for real on a gate-ready decision for the first time. I ran the machine check myself (exit 0, terminal-green, exempted_steps 1, correct exemption id) and a negative control on the same record with a wrong expected head (exit 1, not-terminal-green, exempted_steps 0). Both halves of RM-61 — the signature-scoped exemption and the subject binding — demonstrated in a single run. The pre-registered ACs deliberately do not re-check what I reproduced; they attack the FIX, because every round on this mission the remediation introduced the next hole. H1 asks whether the new derivation's inputs are author-controlled, S1 whether the schema closure is a class or an enumeration, C2 whether the new criteria are clauses or just their originating instances. Co-Authored-By: Claude Opus 5 (1M context) --- docs/remediation/BOARD.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/docs/remediation/BOARD.md b/docs/remediation/BOARD.md index 68582975..0cb430f3 100644 --- a/docs/remediation/BOARD.md +++ b/docs/remediation/BOARD.md @@ -16,14 +16,14 @@ ## In-flight -| Task | Owner | State | -| ------------------- | ------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| RM-01 checkout | — | **MERGED** `f58b3699` (#1027) | -| RM-03 queue guard | **Jason** | **GO** @ `78ec47cd` (cmt 20392) — HELD FOR OWNER MERGE. Head unmoved; GO commit-bound, VOID if it moves — **do not push #1032** | -| RM-02 registry ★key | f10-coder | **NO-GO @ `83d2ecb2` — FOUR silent-defeat paths (D-44).** A4/A5/A6 confirmed. ALL FOUR in this PR, **no trim** (Mos): a registry with a known silent defeat IS the inert gate. Remediating, red-first | -| RM-61 CI exemption | — | ✅ **MERGED** `f4fd5967` (#1033). #1034 closed; **#1000 stays OPEN** (retirement trigger). Exemption is on `main` | -| RM-59 / RM-60 | Jason (infra) | tracked deps; RM-60 option **B** | -| #1023 queue attempt | Jason | SUPERSEDED-PENDING-JASON — live REQUEST_CHANGES, do **not** merge | +| Task | Owner | State | +| ------------------- | ------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| RM-01 checkout | — | **MERGED** `f58b3699` (#1027) | +| RM-03 queue guard | **Jason** | **GO** @ `78ec47cd` (cmt 20392) — HELD FOR OWNER MERGE. Head unmoved; GO commit-bound, VOID if it moves — **do not push #1032** | +| RM-02 registry ★key | rev-974 | **RE-REVIEW @ `32b490a7`** — all four D-44 defeats remediated; 3 attacks re-run dead by orchestrator. CI 2197 terminal, **RM-61 exemption load-bearing for the first time**. ACs @ `72b577eb` | +| RM-61 CI exemption | — | ✅ **MERGED** `f4fd5967` (#1033). #1034 closed; **#1000 stays OPEN** (retirement trigger). Exemption is on `main` | +| RM-59 / RM-60 | Jason (infra) | tracked deps; RM-60 option **B** | +| #1023 queue attempt | Jason | SUPERSEDED-PENDING-JASON — live REQUEST_CHANGES, do **not** merge | ### For the incoming orchestrator — read this before acting