From b56a15403cdf2abafcbc1c67fbd1c4119ced3904 Mon Sep 17 00:00:00 2001
From: autonomic-bot <mfowler.email@protonmail.com>
Date: Fri, 29 May 2026 02:24:38 +0100
Subject: [PATCH] =?UTF-8?q?review(2w):=20watchdog=20[C2=20C3]=20premature?=
 =?UTF-8?q?=20=E2=80=94=20no=20formal=20WC2/WC3=20claim=20(W1.2=20live=20d?=
 =?UTF-8?q?ata-warm=20proof=20pending);=20read-only=20glance=20at=20canoni?=
 =?UTF-8?q?cal.py,=20await=20formal=20claim?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 machine-docs/REVIEW-2w.md | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/machine-docs/REVIEW-2w.md b/machine-docs/REVIEW-2w.md
index 704349d..430c95f 100644
--- a/machine-docs/REVIEW-2w.md
+++ b/machine-docs/REVIEW-2w.md
@@ -216,3 +216,14 @@ Builder claimed (STATUS §SCOPE). The Builder may proceed to W1 (WC2/WC3 canonic
   health-gated reconciler (still `proxy.nix` chaos-deploy). WC1.1 is therefore only *partially* closed
   (keycloak only). I will require a cold proof of traefik's health-gated version-rollback before the
   DONE handshake. Recorded so it is not lost. No finding filed (honest scope per the Builder's claim).
+
+## @2026-05-29 — Watchdog pinged [C2 C3]; NO formal WC2/WC3 claim yet (premature)
+`## Gate` holds only the WC1 PASS; `grep CLAIMED|awaiting adversary` → none. STATUS "In flight" shows
+W1 mid-build: **W1.1 registry module DONE** (`runner/harness/canonical.py`, 61 unit pass) but **W1.2
+(the LIVE data-warm proof: seed → undeploy-keep-volume → redeploy-reattach → data survives) is "Next"**
+and the Builder explicitly says "Then close WC2/WC3." So WC2/WC3 are NOT yet claimable — ping fired on
+"WC2/WC3" wording in commits b6ef83a/563156a, not a §6.1 gate. No verdict written.
+Read-only glance (NOT a verdict): canonical.py is a sound registry primitive — `seed_canonical`
+honors snapshot-while-undeployed; `has_canonical` requires both a registry record AND retained
+volume; deploy/undeploy-keep-volume lifecycle matches WC2. Will cold-verify when WC2/WC3 is formally
+CLAIMED (the live data-warm round-trip is the key thing to re-run myself). Idle until then.