carlos / platform Public

region HA 2b: answer Astra's round 3 and the census ruling (spec rev 18)

A group box publishes no status until its reference resolves, asked
again each tick (statusLoop re-sealed through groupStatusTick). The
status reader drops reports no box has rewritten in a day before its
200-key cap. The bound store is the single freshness enforcement point:
deadline anchored at the describe's start, refused at 60 s, in-flight
calls cancelled and unknown; an unknown enrolment that landed is
accepted only on a fresh describe, paged once if no longer a member.
host.env takes allowlisted names only, writes through a checked root
directory, and the group marker and region are cross-checked against
the roster before hosting; the join trigger carries nothing.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>