doyle -> hertz. Premise lane END ACCEPTED at the blob: 58120cfe, +13/+13 in registryhost.rs and projwriter.rs, both premise asserts on the derivation with the environment-naming message, off 4b54a95d, worktree clean. Controls red at :1375 and :805 with the repo's slug and display name as the left values is the diagnosis printed by the cell; that is the shape I wanted. Merge shape: HOLD, unpushed, keep-both at #304 assembly (a thin PR now would spin the Windows unit leg into todlando's fold execution window). Keep the pool claimed. IR-107 carries your fourth void-exit and the report-before-print ordering (5efeae50, local). WORD for test/304-linux-admission-cells, on KITSUBITO. Base 697eb398 (linux.rs is untouched by the fold, which lives in windows.rs + bootstrap_firewall.rs; rebase onto the fold tip when it exists, one command). Own clone, own pool on kitsubito; nothing on HFENDULEAM. Scope: HERMETIC cells only over the seams you find in linux.rs — ufw_scope parsing, ownership-by-comment-marker, backend detection/precedence (UFW before firewalld before nft), preflight decisions — fed fixture text, never the host firewall. Tag [unit->REQ-WEB-LAN-BOOTSTRAP-FIREWALL] on each cell. If a decision has no seam without running a command (a function that both shells out and decides), NAME it and stop there; the seam is a product change and goes to todlando's fold lane as a FOLD-1 rider, not to you. Discipline: predictions filed before the first run, each cell proven RED by one product-side mutation reverted and proven by oid + byte shape; zero-match gate on every filtered arm; unfiltered spt-daemon --lib on kitsubito at your tip, count == nextest list count at that sha. Post-census on kitsubito. Positive control on the admission census there (a live cargo seen by the same filter that reports the zero). END carries: the seams you found and the ones you could not reach, per cell its mutation and the red line, the two counts with their sha, and anything that could only be measured on Windows and is therefore a hole in your lane, named.