| 1 | **Finding 1 is not the only open item. Finding 2 still has a model/build mismatch.** Reviewed model `ded69314` against built HEAD `b9092a0c`. No P1 established. |
| 2 | |
| 3 | 1. **P2 — The model makes the first serving wake warm; the build requires cold.** |
| 4 | |
| 5 | The model certifies the stopped probe in [ltx_test.go:411](/home/paulca/amadan.net/carlos/platform/.claude/worktrees/region-ha-two-box-build/internal/sim/hostlife/ltx_test.go:411), then consumes that certificate for warm admission in [protocol_test.go:1644](/home/paulca/amadan.net/carlos/platform/.claude/worktrees/region-ha-two-box-build/internal/sim/hostlife/protocol_test.go:1644). |
| 6 | |
| 7 | Built serving admission instead selects a fresh generation with `Mode: "cold"` in [claimowners.go:423](/home/paulca/amadan.net/carlos/platform/.claude/worktrees/region-ha-1b-next-build/internal/host/claimowners.go:423), explicitly refuses `PredecessorCertified`, and records the predecessor’s `writes_lost`. N6 reuses the stop receipt; it does not grant warm admission. |
| 8 | |
| 9 | **Assumption (a) is false; the model needs correction.** A successful replication flush does not confer admission certification. Model the fresh generation, changed installation stamp, loss declaration and subsequent cleanup. Extend the N6 witness beyond checking that a process runs. |
| 10 | |
| 11 | 2. **P2 — Finding 1 remains: rollback loses source files protection.** |
| 12 | |
| 13 | [movessources.go:491](/home/paulca/amadan.net/carlos/platform/.claude/worktrees/region-ha-1b-next-build/internal/host/movessources.go:491) still returns the newest admission’s region during `restoring`. After target admission, source-region parks can consequently lose protection for files needed by rollback. The previous finding remains unchanged, including its latent rather than demonstrated production impact. |
| 14 | |
| 15 | 3. **P3 — The model conflates session closure with the later host admission fence.** |
| 16 | |
| 17 | [regionha_test.go:158](/home/paulca/amadan.net/carlos/platform/.claude/worktrees/region-ha-two-box-build/internal/sim/hostlife/regionha_test.go:158) closes `relFence` before flushing and blocks subsequent source admissions. Built `StopWriters` closes the current attempt and session’s launch journal first; root’s durable admission fence comes through `Collect` **after** flush and position recording at [relocationeffects.go:202](/home/paulca/amadan.net/carlos/platform/.claude/worktrees/region-ha-1b-next-build/internal/host/relocationeffects.go:202). |
| 18 | |
| 19 | **Assumption (b) is not an exact match.** Separate these states and exercise wake/restart during the intervening interval before enabling drains. This establishes a modelling limitation, not simultaneous writers in the build. |
| 20 | |
| 21 | The other judgments: |
| 22 | |
| 23 | - **Finding 2:** discharge ordering, retries, owned fences, successor barriers and claim-mode completion are now represented. Closure remains blocked by the cold-wake mismatch above. |
| 24 | - **Finding 3:** the requested catch-up path is implemented and modelled. Ruling 85’s successor-operation residual is acceptable **while dormant**: a stale ready row can affect availability until park-local, but no second writer was established. It does not prove the full source-hold requirement for activation. |
| 25 | - **Finding 4:** closed. C1 refusal precedes release effects; C11 refusal precedes attempt counting. |
| 26 | - **Ruling 86:** sound on the inspected paths. [completion_fence.go:61](/home/paulca/amadan.net/carlos/platform/.claude/worktrees/region-ha-1b-next-build/internal/hostops/completion_fence.go:61) verifies the exact termination record against roster authority and the completion box. Missing or invalid evidence cannot obtain the exemption. No live-box participation bypass found. |
| 27 | - **Assumption (c):** matches. Completion follows the journalled probe stop; the former relocation `opened` phase and settle window are absent. |
| 28 | |
| 29 | Targeted tests in both worktrees were blocked when Go tried to create its build directory on the read-only filesystem. These conclusions are from static inspection. |
| 30 | |
| 31 | --- |
| 32 | |
| 33 | **FIRST PROMPT:** |
| 34 | Follow the L18 joint-round review brief against the model and built HEADs. |
| 35 | |
| 36 | **WHAT:** |
| 37 | Assess whether relocation may merge dormant after finding 1 lands. |
| 38 | |
| 39 | **STATUS:** |
| 40 | Review complete; two P2 findings and one P3 limitation remain. |
| 41 | |
| 42 | **NEEDED:** |
| 43 | Nothing for this review. |
| 44 | |
| 45 | **RECOMMENDED:** |
| 46 | Fix source protection, correct the model’s first serving wake, and rerun the joint gate. |
| 47 | |
| 48 | **SESSION:** |
| 49 | Safe to close; no files changed or background processes started. |
| 50 | |
| 51 | **Verdict: no—landing finding 1 alone is insufficient for relocation to merge dormant.** |
amadan