Astra: region HA spec 2, round 6

Rev 6 simplifies forwarding (§6, §9, §18). Rounds 3 to 5 each found a new edge in rev 3's two-hop protocol, so rev 6 removes it:

• Today's one-hop forwarding, credential and mesh-key rotation are unchanged.
• Within a region, a box dials the home box's private IP. Between regions, it dials the home box's own public IP. Group boxes have auto-assigned public IPs.
• A box publishes only an address IMDS reports as its own.
• Every instance is relocated off the old box before the region's EIP moves to the NLB.

Judge:

1. Are A5-1, A5-2 and rounds 3 to 4's forwarding findings genuinely moot?
2. Does rev 6 reopen anything closed in rounds 1 to 2? In particular A1-12 (published address becoming the NLB's), A2-7, A2-9, and rollback.
3. The migrate-before-cut-over order (§9). While the old box still holds the region's EIP and the instances live on group boxes, is every request path one hop? Consider requests via the region's EIP, cross-region forwards, platform routes, certificate challenges, and the NLB's zone B address.
4. IE platform routes at the cut-over (§9 step 3).
5. Anything new. Report only new items.

Give findings P1/P2/P3 with file:line and a failure scenario. End with a verdict: ready for a plan, or not.