Design candidate 5fbfdf0ac036bd36dd476006f138741cdad292be frozen; configured Fable design review active. Local stacked gate exposed source integration mismatch: root171 renamed directorydata.validOrigin to exported ValidOrigin, while producer32fb calls former spelling at roster.go lines45/110. Full gate therefore fails compilation before tests. This is not a design verdict or a failure of the independently approved producer on its original base. Frozen source remains unchanged; parent informed and exact mechanical correction identified. No HTTP implementation or live changes.
Directory roster HTTP and signing integration design open
On branch design-roster-http
Design-only stack on root 171f49a plus approved module 667dc82 and producer 32fb49c, preserving frozen branches. Specify directory-only RosterSchema, exact bearer/challenge/cursor HTTP contract, distinct roster signer/config and bounded shared signed pages. No operator initial generation/consumer/token writes, no ad hoc bootstrap, implementation or deployment. References discussions 28, 29 and 33. Docs TeamMode agent confirms wire unchanged; pending cache lease amendment has no Page/SignPage change. Fable design review required.
Docs TeamMode design 75818ad is now Fable-approved (Docs56). Required shared-module amendments include TryLock-based lease checks and explicit unknown-kid refusal; Page/SignPage wire unchanged. Future HTTP client-backed wrong-key acceptance tests must use the reviewed amended module once published. Active HTTP design review remains frozen; this dependency is recorded rather than silently changing reviewed source. Parent authorized two-call ValidOrigin integration rename after current review terminates, with combined gate rerun and delta included in later integration review.
Fable design verdict APPROVE, no blockers, exact design5fbfdf0ac036bd36dd476006f138741cdad292be. Invocation -m claude-fable-5, event model metadata claude-fable-5, exit0; evidence /tmp/oficina-roster-http-design-review/{verdict.txt,invocation.json,model-metadata.json,design-exit.json}. Preconditions: operator record uses exact derived roster kid; parent171 base integration; actual runtime middleware/transport/privacy audit; audited provisioning and root canary before live enablement. After review terminated, parent-authorized two-call ValidOrigin rename committed4b0048a, design unchanged. Combined gate/CI now running. No endpoint implementation, mutation path, schema mount or deployment performed.
Corrected stack4b0048a7356289984545a8fb3cdc4ca93c78f2e2 full make test and exact Amadan CI now pass. Approved design5fbfdf0 is unchanged. Parent has authorized implementation on fresh main88e09a4 ancestry; this design branch remains frozen. No deployment or operator seed occurred.
DEPLOYED corrected9e9613d0a54c57e1e284904e26179ba9816eff4f to existing paired Home previews, channel canary/overnight-home, configuration unchanged and roster disabled/no key. Actual API bodies plus edge headers on overnight-home-id.bds.oncarlos.com and overnight-home.bds.oncarlos.com both match9e. Initial credential body171/header9e lag resolved during supported deploy after exact-host restart request; no raw intervention. /tmp/oficina-roster-http-release/verified.json, artifact SHA2566ade682d1c7862dad5c8921ebb316cabdd0a63b47aad4e67e958cf7688ce29c2.
Six unsigned live GET/HEAD transport checks pass, including identity/gzip and directory no-store,no-transform/no-Encoding/no-cookie. Eight Chromium/WebKit x JS on/off x320/1280 entry/sign-in checks pass, no human email/authentication. Evidence under /tmp/oficina-roster-http-release/{disabled-roster.json,browser/results.json}. Actual171/fd119 schema/handoff compatibility and header-only9e delta remain accurately scoped; no team provisioned or feed enabled.
Fable R1 and corrected R2 explicitly APPROVE; full gate/race/exact CI green. R2 prose SHA-heading typo documented against actual frozen source/runner/CI; original verdict preserved. Canary evidence review active at /tmp/oficina-roster-http-canary-review/review.ndjson, service oficina-roster-http-canary-review-20260908. Normal integration merge waits for its verdict. User notified live URL and limited visible scope.
Canary evidence review explicitly APPROVE, end_turn/exit0, /tmp/oficina-roster-http-canary-review/final.txt. Reviewer verified exact9e deployment/artifact/CI, actual edge28-case proof, live six transport/eight browser checks, and narrowly scoped171/fd119 compatibility plus corrected-header delta. No feed enablement, initialization, team provisioning, restore or production approval. Normal integration merge proceeding.
Additional independent source provenance check now closes the earlier informational nested-module concern: all seven tracked roster files byte-match actual published module v0.0.0-20260908123429-74dda570e0cf used by the root build; /tmp/oficina-roster-http-release/published-roster-source.json. No source/runtime change.