Round 1 (`CODEX-PLAN-REGION-HA-TASK-10B-R1.md`) found one P2. When the first reconcile after the fence was delayed past `ToInstalling`, `CheckLocal` looked for the target's stamp on the source. It refused before `holdOnly`, and the row stayed ready.
4
5
**The fix, rev 5.4.1 (e236acd5).**
6
- The hold-only path checks the source's own installation through a new `EmptyInstallationCensus.CheckHeld`, which the adapter sets.
7
- That check grants no installation authority, and an unreadable or contradicting inventory refuses.
8
- A new test uses the real adapter, census and provision pass, with the reconcile delayed until `installing`. It reproduced the defect and now passes.
9
10
**Judge:**
11
1. Is the P2 closed?
12
2. Can `CheckHeld` accept a source whose installation is not this host's? Can it be used anywhere to grant installation authority?
13
3. Is anything new introduced?
14
15
Give findings P1/P2/P3 with file:line, then a verdict: ready to build, or not.
amadan