# Round 8 disposition

Input: revision 14, SHA-256 `78cd50f57f8c8962efa714b4ee92a5e04bce047271ea7ea43164fc635d1e28d3`.

K3 completed a full-plan review with no substantive findings. GLM completed seven overlapping scoped reviews with no substantive findings, covering all 18 sections. All eight runs have exit 0, nonempty final reports, and preserved input evidence. Opus completed with three findings.

## Corrections in revision 15

| Finding | Disposition |
| --- | --- |
| Opus 1, medium: security-floor activation timing | Accepted. Announced floors remain proposed during staging and waiting. Commit floors with the installed manifest only after old roles quiesce and replacements pass checks. Recovery keeps admission closed until a complete compatible set is validated. Early enforcement remains a separate user decision. |
| Opus 2, medium: root authority rollback | Accepted. Signature validity alone cannot satisfy equivalent placement protection. A trusted activation/launch boundary independently rejects older signed root code; the authority's startup self-check is defense in depth only. Floor and ledger protections cannot be lowered through backup restoration. |
| Opus 3, low: UI requests stranded by replacement/restart | Accepted. Automatically recapture still-present dialogs rejected during installation or cancelled by a root restart, only when previous identities are established as never consumed. Preserve age/deadline, issue a fresh challenge, and require a fresh decision. Never auto-recapture explicit denials/cancellations or consumed/unknown actions. |

Section 11 now names all three requested reviewers and explains scoped evidence after provider output-limit failures. Readability subheadings were added without removing requirements.

No forced update deadline, command termination, new biometric, shorter approval window, or forced re-pairing was adopted. Automatic recapture creates a new request only; it never reuses consent or dispatches an action.

## Next pass

K3 and Opus inspect the complete revision 15. GLM re-reviews changed sections and their affected interactions. Prior GLM reports can cover only text proven unchanged by exact comparison; the coverage record will identify every source report and section.