Review brief: region HA plan 1a (foundations), round 2

Read CODEX-PLAN-REGION-HA-1A-BRIEF-1.md first: its "Fixed: do not re-argue" and "What to check" sections still apply, to the plan at the commit named in the prompt.

Round 2

This revision answers your round 1 (CODEX-PLAN-REGION-HA-1A-R1.md); the plan ends with a dispositions table. Since round 1 the plan's code was dry-run by its author: every new package and both patch tasks were written into the tree, built, cross-built for darwin and windows and tested, then removed. The code blocks for internal/boxid, internal/hostfiles, internal/termfence, internal/activator/installed* and internal/console/boxchoice* are those files verbatim. So a "would not compile" finding should be rare: if you raise one, quote the line and say exactly what is undefined.

First give a disposition table for your nineteen round 1 findings: resolved, partly resolved (say what is left), or not resolved. Then report only new findings, including any the fixes introduce. In particular look at:

• readStable, syncRoot, Restore, removeInside, writeInside and their use of os.Root (Go 1.26): any remaining way out of the root, any way to block, any path where a tombstone or a write is skipped that should not be, or the reverse.
• The run loop's degraded, repair and dead-watcher handling, and whether each test can pass with its mechanism disabled.
• edgesFileWrite's refresh and the seeded gate.
• foldHomes's tie reporting and dialBeats against every existing home-map rule.
• The SQS queue policy's Deny: does it block the EventBridge rule's own delivery, or anything else that must work?
• The plan's claim that an alert on two unstamped home entries would be wrong today. Check it against edgesFilePass and everywhereClass.

Two things the author could not run and says so: the six real-inotify tests in watch_linux_test.go (read watch_linux.go with extra care) and the IMDS signature check.

Do not re-raise anything you mark resolved.

Output

As round 1. End with a verdict: ready to build, or not ready.