stack/docs/plans/reviews/2026-09-06_foundation-inspector-filbert-request.md

FI-FILBERT-2 — frozen inspector charter review

Jason authorized continued planning with Filbert and Rocko. FI-FILBERT-1 confirmed availability/non-authorship; recheck if current assignments changed, without reprioritizing owner work. Author/integrator: darkwing; contributor: rocko. Review requester/follow-up owner: darkwing. Reviewer: filbert.

Exact candidate

Repository: /home/jwoltje/src/mosaic-stack-dev-test

1. docs/plans/2026-09-06_foundation-inspector-charter.md, candidate 2 SHA-256 cbd0487a2ab699722924e2f91367bf556facb015752ce3b5a76ad474977df791
2. Incorporated sections 5–13 of docs/plans/reviews/2026-09-06_foundation-inspector-rocko-feasibility-r2.md SHA-256 f2f47fcfe22dca79f10f885b83d87a2f846fdb560425a4e20705c40ce4a123e1

Charter overrides the note explicitly. These are frozen uncommitted planning inputs, not falsely attributed to an earlier Git commit. No edits during review. Accepted map commit 7345f330fc6bfae5aa1d896c78cfb7cbe62efbae; accepted source/plan baseline d4696d09eb. Use committed bytes for those sources, not Dewey's mutable extension work.

Review questions

• Is this bounded build contract coherent, implementable and faithful to the accepted map, or does it need further design before code authorization?
• Validate exact reference types, graph/current-versus-historical handling, record subset, required role/policy/execution layers and optional narrowing semantics.
• Challenge requester contexts in both reassignment scopes, intent/delegation checks and the deliberately unreachable success path. Do not mistake declared authorizations/artifacts for authentication or trusted evidence.
• Check privacy-safe output on every failure stage, closed shape/nullability, precedence, rule/exit distinctions, number/Unicode domains and differential test separation. Identify contradictory requirements or untestable acceptance.
• Check proposed filesystem open/read boundaries, no-live-effect limits and static/test evidence limits. Node does not expose O_CLOEXEC on the measured host; the charter explicitly corrects the note rather than claiming unsupported flags.
• Check that mandatory schema differential verification actually addresses validator drift, that fixtures can reach intended rules, and that the proposed first slice stays small enough to test before dependent runtime work.

This is a written implementation-charter review, not code, runtime, full Archify or owner acceptance. No runtime implementation exists to test. Do not run native, sync, live fleet, credential or installation checks. Static/helper calculations on synthetic data in temporary space are allowed; report what you actually measured. No dependency installation, shared checkout/reset, commits or pushes.

History, not alternate specifications

Rocko r1 was useful but had nine coordinator correction groups; r2 accepted all. The charter further fixes numeric 1.0 versus 1.5, unsupported-operation exit 2, O_CLOEXEC availability, requester policy contexts, error output, input profile, registration ambiguity and historical-reference admission. Re-evaluate these changes independently; Rocko did not approve the integrated charter.

Return

Reply FI-FILBERT-2 with APPROVED or NOT APPROVED for these exact input hashes, numbered blocking/nonblocking findings, evidence and required corrections, review question dispositions and measurement limits. Do not fix or co-author the candidate. Only allowed repository write: docs/plans/reviews/2026-09-06_foundation-inspector-filbert-verdict.md. Provide its SHA-256. If assignment compatibility fails, return a blocker instead. No implementation, source moves, role changes, fleet investigation or phase advance. No deadline, automatic timeout or automatic acceptance. Direct reply is the return mechanism; darkwing owns follow-up. No separate ~/.mosaic activity is requested.

Transport (2026-09-06 08:42 UTC): sent FI-FILBERT-2 once to =filbert on default socket; exit 2, submission unconfirmed, not acknowledged. Await direct admission/verdict or blocker. No timer or retry. Follow-up owner darkwing.