**P3 — The rule catalogue still describes the rejected landing boundary.** [rules_test.go:211](/home/paulca/amadan.net/carlos/platform/.claude/worktrees/region-ha-two-box-build/internal/sim/hostlife/rules_test.go:211) says source protection lasts “until the target’s probe is admitted.” The implementation now correctly retains it until `op.Committed`. Update that description and mention the post-admission rollback witness.
4
5
The brief’s substantive questions are resolved:
6
7
- **Commit boundary:** the record’s `landing → committed` transition rules out rollback; both transitions require `landing`. Using `op.Committed` in `filesHome` safely retains source files slightly longer. The claim transition setting it also queues the source’s whole-location park at [moves_test.go:974](/home/paulca/amadan.net/carlos/platform/.claude/worktrees/region-ha-two-box-build/internal/sim/hostlife/moves_test.go:974).
8
- **INV-30’s region set:** appropriate for this preservation property. Moves §5.1 describes current-generation authority; rollback additionally requires preserving the source. After a dirty target releases, recovery proceeds in the source region, so dropping the target is appropriate.
9
- **Independence:** [servableRegions and checkFilesPreserved](/home/paulca/amadan.net/carlos/platform/.claude/worktrees/region-ha-two-box-build/internal/sim/hostlife/regionha_test.go:2177) consult neither `filesHome` nor mutation flags. Remembering the previous manifest prevents deletion from silently redefining the expected state. This adequately covers J1’s preservation defect.
10
- **Regression evidence:** the new witness follows the requested delayed-park, clean-rollback, no-republication, source-failover sequence. The separate INV-30-disabled tests retain INV-3 liveness evidence. The matcher correctly distinguishes `INV-3` from `INV-30`.
11
- **J2/J3:** unchanged against stage A `fe144bab`; this fix does not close them.
12
13
`git diff --check` and package formatting passed. Go tests could not start because the read-only sandbox refused the build directory. The reported sweeps and identity hashes remain supplied evidence, not independently rerun results.
14
15
---
16
17
**FIRST PROMPT:**
18
Review J1 fix round 2 at `00bd0abe` against the R3 brief and stage A `fe144bab`.
19
20
**WHAT:**
21
Check J1 closure, rollback preservation and regressions.
22
23
**STATUS:**
24
Review complete: one nonblocking P3; test execution blocked by sandbox restrictions.
25
26
**NEEDED:**
27
Nothing from you.
28
29
**RECOMMENDED:**
30
Correct the stale rule description.
31
32
**SESSION:**
33
Safe to close. No files changed or processes left running; read-only access prevented saving a handoff file.
34
35
**Verdict: J1 is closed at `00bd0abe`, with the nonblocking wording correction above.**
amadan