# Round 13 disposition

Input: frozen revision 19, SHA-256 `2c2e0fe54a42cc8414ad614251f14a6d5d8ec83a000bf59d783a3cede8617cbe`.

K3 completed the full plan with no substantive findings. GLM completed both overlapping gateway and transport scopes, each with no substantive findings and a normal stop. Opus found one medium issue. All processes exited zero with nonempty final reports.

## Opus 1: restored enrollment state

Accepted. Revision 19 required safe restoration but did not define how it could be detected. Revision 20 adds a specific feasibility gate for a non-migrating installation key plus an independently protected trust-generation witness. The text explicitly states that a key alone cannot detect same-Mac rollback and does not assume Secure Enclave offers a monotonic counter.

Verified Mac-signed revocation evidence applies restrictively to local authority. Unknown signed trust changes suspend affected authority and mapping publication until the existing independent administrator recovery resolves them. A higher gateway number alone cannot revoke or enroll anything. Known delivery-only counter drift remains automatically recoverable.

The gate must establish offline continuity and define crash, migration, backup, and reinstall behavior before shipping. Gateway unavailability alone cannot block normal offline operation. If available mechanisms cannot preserve that UX, consult the user before changing requirements. No recurring online check, extra biometric, forced re-pairing, or physical access is approved.

Test a revoked phone against both LAN and relay after restoring an earlier backup, including with the gateway offline. Platform feasibility remains planned work, not a verified claim.