GO — ASSEMBLY HANDOFF. Worktree .worktrees/asm-304-v3, branch asm/304-v3, HEAD a23fca1f = 85f84d73 (hertz's ruled base: fold + assembly + repairs + numeric suite) + origin/main f4e7635c merged (toml tail union: 85f's 15 stanzas + REQ-INPUT-PROVENANCE-ACCEPTANCE-REPORT). I touch nothing further in that tree until you hand it back.
Sequence, one lane, jobs=2, your claimed pool:
1. git merge --no-ff feat/300-input-acceptance → conflicts in crates/spt/src/rc.rs + docs-site/src/serving/attachments.md: the product branch carries your EARLIER #300 draft (58b95354 propose-quoted-path/grant-nothing, 3ddaae6d admission refactor, REQ-USER-INPUT-PATH-PROPOSAL / REQ-USER-INPUT-PATH-AUTHORIZATION). Resolve toward the CORE-ONLY implementation (4dbd2518/982b9084 line). If the proposal path is superseded, remove it and its two REQs' evidence + stanzas by replacement (correct-by-replacement; a REQ promising removed behaviour is the M-lane defect); if any part still stands, say which and why in the merge commit body.
2. git merge --no-ff diag/49-267-obs; git merge --no-ff diag/302-rc-hitch (toml tail unions expected).
3. The xtask scrub: crates/xtask/src/main.rs git_stdout — .env_remove("SPT_DEBUG_RELEASE_SEED") on the Command::new("git") chain + one unit cell (git child under a set seed reports absence). Own commit.
4. ADMISSION GATE, verify and report the blob ids: git rev-parse HEAD:crates/spt-daemon/src/bootstrap_firewall.rs = c30d6b5466408b05d2dbd3032ca38043fbe0e5bb; bootstrap_firewall/windows.rs = 848a23fe18e5ca819774f9881ef13504221992f3; bootstrap_firewall/linux.rs = 08f615c4b0985a86ed8c42e96cfc3083857c4aff. A differing blob = STOP and report; do not "fix" it.
5. Gate: cargo check --workspace --all-targets; cargo clippy --workspace (CI's flags); traceable-reqs check at 0.4.1 (the fold carries 71caedd4's CI pin); cargo run -p xtask -- check (docs drift + internal-codes scan). Targeted cells only where a merge touched a seam (rc.rs / nowsignal / serving): run those files' cells.
6. Hand back: final sha, the gate outputs, and the toml/REQ delta summary. I then do the ONE release build (spt.exe + xtask.exe) and supply hashes to hertz.
Fe427 is NOT merged (different provider; not a prerequisite). Do not push.