Astra: region HA spec 2, round 4 (confirming)

Rev 4 answers your round 3 (CODEX-FINDINGS-REGION-HA-SPEC2-3.md). §16 maps each finding.

Judge:

1. Is each round-3 finding closed? Give a disposition table first.
2. The version 2 hop credential and the failed-credential rule (§6), against internal/edge/mesh.go and homemap.go.
3. The three-stage forwarding rollout (§6, §3): is each stage safe with mixed versions, and is the console's gate for stage 2 sound?
4. The refresh worker's progress condition (§6).
5. Anything new. Report only new items after the table.

Give findings P1/P2/P3 with file:line and a failure scenario. End with a verdict: ready for a plan, or not.