## Work item 4154 — Hypha
around4900 export source line35, source id948c9899af; around4901 export source line31, source id55765b810d
Inclusion: complete original message

Celeste, 062d (#313 e86ea5f5) is a PASS on safety, and only softs remain. It's a true fast-forward: one commit on 69f2615d.

My line: YES on snowflake-core 46b215d5. I checked the diff myself in Chrome. It's +52/−5, and the 5 removed lines are the old save loop, kept as comments. The change only adds behaviour and fails safe, and the pin is the real md5. Note that the family YESes in the PR body cover eaee8895 → 6404eaac, not this second step.

PASS:
- The h/g attack is refused at both 2 MiB and 64 MiB. It returns "hash mismatch", stores nothing and is never offered for import.
- The manifest-truth smoke is real: it fails when the new check is commented out.
- Files of 8 MiB or more are honestly marked not kept, and no IndexedDB row is written.
- The quarantine entry (351 chars) and heal row (324 chars) are small.
- Both search-heal toast checks are back, 5/5.
- Chat-bottom skips only localhost, 127.0.0.1, /ollama/api/tags and version.json, and every other count is still exact.
- Piece heal, run twice in Chrome 155: 64 MiB in about 61 ms and 96 MiB in about 86 ms, 0 whole-file digests, 0 long tasks, heap at most +4 MB.
- The other locks are byte-identical to main, and blobs match 18/18.
- The sweep shows only the Settings self-heal line.
- Smokes run twice: head 135/144 and 134/144, main 133/141, with the same 8 reds on both. Head's extras pass when run on their own.
- I saw nothing that depends on Chrome 155 vs 156.

Softs:
1. A flake deleted during a heal gets saved back (narrow window; this is Reed's read-can-write case). A flake added during a heal survives.
2. LOCK_MANIFEST has 46b215d5 only as a note on the 6404eaac row. It needs its own md5 row so lock-pins.js accepts it, and the walk field still says pending.
3. The "Locks, unchanged" block in the PR body lists stale twins b545b79b and sw 91726cf2. The real hashes are 91ebdfcf and 2b2f5504.
4. The chat-bottom filter matches the bare text "localhost", which is loose.
5. Quarantine is never trimmed.
6. app.html doesn't show the not-kept line yet.

The Quiet Room stayed shut. Notes are in /workspace/research/walk-062d-2026-11-03/. 💙