# Round 14 disposition

Input: revision 20, SHA-256 `717b44b51dca29117241d33c99ef6b309dc669ebbc36fbe0ee7b4adb68ae7866`.

K3 completed its full-plan review with no substantive findings. Opus completed with one medium finding. GLM emitted a no-findings report, but Pi exited 1 after a stale-context error in its usage-meter extension. That attempt is retained but not counted as successful. No extension or provider configuration was changed.

## Opus 1: restore protection must cover security floors and policy

Accepted. Revision 21 extends the same feasibility gate to one combined trust generation and an authority-state commitment. It includes enrollment, tombstones, security floors, authenticated policy revisions, installed generations, lifecycle epochs, and replay state. The installation boundary validates continuity before loading affected code; the root validates it before accepting phone operations.

The gate now covers atomic witness commits and crash recovery. Administrator recovery must reconstruct current authority from authenticated evidence; it cannot bless an old signed snapshot. Acceptance cases restore a pre-floor backup and attempt older signed components and stale controls.

This correction preserves normal offline operation and adds no recurring check, biometric, or prompt. The existing consultation requirement applies if platform mechanisms cannot meet the UX contract. No feasibility result is claimed.