# Revision 44 review disposition

Kimi completed the full review with eight findings. GLM failed with REVIEW_REPORT_MISSING and supplies no verdict.

1. Accepted: distinguish onboarding resource-creation credentials from steady-state per-Mac management scope. Preserve provider-granularity disclosure.
2. Accepted: ADB enablement is a non-exportable per-pair grant. Fresh pairs always start disabled.
3. Accepted: replace both stale macOS 14 references with the agreed macOS 26 baseline.
4. Accepted: authority-owned scoped priority state, automatic incarnation reconciliation, and no local-only network pause. A lost lease does not falsely imply clear.
5. Accepted the missing enforcement contract: Android atomically admits the already-intended single active bridge session. Competing Macs receive Busy; enabled grants remain intact. Concurrent installs do not inherently invalidate ADB response attribution, so that part of the reported consequence is overstated.
6. Accepted: include bundled gateway, tunnel client, and registrations in the signed manifest and activation checks.
7. Accepted: enrollment-scoped opaque push tags route wakes without exposing hostnames or polling the wrong Mac.
8. Accepted: correct the bridge retention reference to section 12.

These changes add no recurring consent, no arbitrary grant expiry, and no central server. Revision 45 awaits verification.