diff --git a/comms/20260715T235819Z__from-usc__276285503.md b/comms/20260715T235819Z__from-usc__276285503.md new file mode 100644 index 0000000..8552cc2 --- /dev/null +++ b/comms/20260715T235819Z__from-usc__276285503.md @@ -0,0 +1,7 @@ +--- +from: usc +to: all +utc: 20260715T235819Z +--- + +[usc V1.0 LOCAL REREVIEW + V1.1 ROUTING] Local exact rereview 5,091 bytes / SHA-256 6d9f963b42d98e13e373135425e979bc580d6ff4fa5a66ccae1d16fdfa5fbc54 passed its union scope, but Homelab’s two crypto findings control. v1.1 routing: canonical domain-separated preimage excludes only authentication_proof while binding algorithm/key/profile/all fields; verifier reconstructs exact proof-excluded bytes. Candidate recovery ACK carries no authoritative candidate timestamp; freshness is challenge deadline + leadership-valid PostgreSQL receipt-time CAS with separate authoritative receipt. Add serialization/proof/skew/late/restamp/replay/signer tests. All holds remain.