[EHotwagner]

fdev: closes Atlas capture gaps from 2026-10-22/23. All records are append-only. One same-ID supersession; no baseline bytes changed.

New records

• platform/shared-bounded-execution-route (decision): [decision] Select the shared bounded execution route for SC2 and LEARN #4777 selects route (a), the Home finite profile, and does not select a managed runner. Includes the E5 amendment (slice MemoryMax=6G, TasksMax=1280, 2-op cap under a lock, headroom against the slice), the (b) re-entry condition and the SC2/[V3-ENV-01] Qualify unattended provisioned execution and ephemeral storage #4650 boundaries. Sources: #4777 6358880288, 6359588237. Closes the capture gap that the decision recorded for fdev.
• learn/home-finite-host-profile (boundary): rev 11 r2 ec0a031d… governs. A0–A26 accepted with gaps. C3 r4 / C2 r5b / ack writer / drop-in were installed at 07:44Z, and the live slice was read back. Includes the retirement-ack gate. A0 r4 is 9/9 and harness r3b is 31/31. rev 11 r2 + E5 is established on production (fdev ACCEPT-WITH-GAPS, Restore authentic LEARN installation access and qualify its finite host execution profile #4745 6360638156). The disconnect Done-when is met by A28/A28b per decision 6358883043. Sources: [cross-repo] V3-ENV-01: name the host provisioner and independent cleanup owner #4516 comments 6349889898, 6352661446, 6353209726, 6359541244, 6359587710, 6360031719, 6360174387, 6360587060, 6360640967.
• environment/home-least-privilege-policy (decision): service-account operation, hash-pinned sudoers for unavoidable root, no standing root shells, prompt-injection guard. The 24 h suspension (to about 2026-10-23 17:21Z) is recorded as a temporary exception, not policy. Sources: [cross-repo] V3-ENV-01: name the host provisioner and independent cleanup owner #4516 comments 6344780731, 6346556877, 6346571312, 6346880328.
• github/nuget-trusted-publishing-policy-scope (lesson): nuget.org policies have no branch field, so without an environment, a same-named workflow on any branch can mint keys for the whole glob. Includes the narrowing practice. The user's nuget.org pass was still pending at capture. Source: Coordination#1026 6358900581.
• github/board-cohort-membership-drift (lesson): Project 3 auto-adds sub-issues, so a fixed 69-item cohort refuses. GitHub can also return transient empty items (Coordination#1049, Retain typed failure custody for refused board-v2 migration-prepare #4812). Lesson: take the expected membership as an explicit input. The session-local caller's parameterization is reported, not cited as source.
• github/single-use-admission-rehearsal (lesson): from the Qualify the first clean downloaded shared-game-reference journey #4710 runs 1–2. Rehearse never-hosted setup from clean caches, at hosted-like CPU limits and against published bytes, before spending a single-use admission.

Supersession

• github/home-utel-receiver-host-0-8-state: f4de2890… is superseded. The old version still described the first passive send as only expected. The new version records the accepted first durable receipt (Qualify one authenticated durable UTEL producer-to-current-receiver receipt #4705 6344445603), batch 2 still pending, Unknown attribution, and the installed fsgg-admitted post-window path.

Revised after independent review (head c3b7b6e4). The changes:

• the LEARN acceptance and disconnect decision;
• the 32 GiB evidence threshold on the route record;
• policy attribution;
• the board and NuGet wording;
• the rehearsal record now covers run 3;
• the UTEL Unknown (iii).

Checked and not changed: github/wizard-omitted-lifecycle-descriptor-default (current; Wizard 0.22.0 is still unpublished); templates/wasm-installed-c-run-* and game/wasm-worker-startup-bound (current through run 2; run 3 passed 27/27 at 6360388935, and recording it is the #4710 owner's Templates capture); github/utel-producer-association-identity. The SDD#928/Governance 1.14.0 finding stays with the GOV-423-C2 owner (Governance#472 open; reserved routine/gov423-c2-atlas-20261023), so it is not duplicated here.

Citations are files at .github@fa3e87f8, FS.GG.Coordination@bc3c504b and FS.GG.Templates@24f3c307. Issue comment URLs are in the summaries. No secrets, private paths or evidence payloads are included.

Local checks: python3 tests/atlas/check.py --baseline fa3e87f8… (368 records, 699 local citations verified); scripts/generate-driver-manifest --write/--check; tests/skill-registry/run.sh; scripts/skill-view-parity.sh; tests/skill-quality/run.sh. The .agents and .claude seed mirrors are byte-identical.

— fdev

🤖 Generated with Claude Code

[EHotwagner]

fdev 2026-10-23: review record, merge HELD.

• Review. An independent fsgg-critic-best review returned REQUEST CHANGES on f497ad83. Its three material findings were fixed:
  • the LEARN disconnect decision and acceptance;
  • the route record's evidence threshold;
  • Home-reported results that were stated as accepted.
    Five minor wording and attribution findings were fixed too. The delta review returned ACCEPT on exact head c3b7b6e48a954ec60d86cf5a04337b62da3d3d53.
• CI on c3b7b6e4: 53 pass, 2 skipping, 0 fail. The local tests/atlas/check.py --baseline fa3e87f8… passes: 368 records, 699 citations verified.
• Merge is held under the coordinator's .github main hold, which keeps main at 150d5c43 for the Wizard 0.22.0 publication. Once the hold is released, merge with --match-head-commit c3b7b6e48a954ec60d86cf5a04337b62da3d3d53 if the head and checks are unchanged. If main moves, the catalog may need a rebase and recapture, and that needs a fresh review of the new head.