📋 Execution Plan 2026-07-11 · consolidated merge-order (5 waves -> one ordered plan; #60 unblocks all)

[gHashTag]

Consolidated Execution Plan — 2026-07-11 (merge-order, not a new audit)

The five audit waves (PRs #59, #67, #69, #71, #73 / issues #58, #66, #68, #70, #72) are now synthesized into one dependency-ordered execution plan: docs/EXECUTION_PLAN_2026-07-11.md (branch feat/execution-plan-2026-07-11, draft PR linked below).

The single bottleneck (verified from git this session)

main does not build from a clean clone — fails in build.rs:29-30 (E0308 + E0599, 4 errors) before the library/gen/rust is reached. Ground-truth: 68 specs, 101 tests.

Nothing downstream is verifiable or regenerable until PR #60 merges. Every P1/P2 fix is spec-first with an executed cargo test acceptance criterion; none can run on a red tree.

Plan shape

• Step 0 (owner): merge build(pipeline): pinned-t27c gen/rust + physical drift-guard (запрет писать в репо неправильно) #60 (pins t27c@4832ec6 + drift-guard + build.rs fix; cargo test=103 green). Close 🌊 Wave 2026-07-10 · fix(build): зелёная библиотека + отчёт волны (closes-partial #58) #59 as superseded (library-only interim). Wiring the 8/9 inert modules is gated on t27#1456 + t27#1457 (both OPEN; t27#1401 CLOSED, already in the pin).
• Step 1 — all 5 P1s, spec-first, by attack-relevance: beacon-auth inert on RX (🌊 Wave 2026-07-11 · audit discovery/daemon/wire + .t27 specs — beacon-auth inert (P1), hello.t27 ghost (P1) #69) → anomaly spike-sentinel (🌊 Wave 2026-07-11 v3 · аудит 9 never-audited модулей — spike-sentinel глушит spike (P1) + flow_control credit underflow (P1) + quarantine 8-bit таймер (P2) #73) → flow-control credit underflow (🌊 Wave 2026-07-11 v3 · аудит 9 never-audited модулей — spike-sentinel глушит spike (P1) + flow_control credit underflow (P1) + quarantine 8-bit таймер (P2) #73) → routing feasibility not RFC 8966 (🌊 Wave 2026-07-10 v2 · код-аудит routing/gf16/modem/router (P1 feasibility + 4×P2) #67) → modem non-normalized sync (🌊 Wave 2026-07-11 v2 · audit wire/CI-CD/seal/deep-modem — modem sync not normalized (P1) + inert seal + unpinned toolchain (P2) #71). Each with the .t27 to edit, an acceptance test, and effort.
• Step 2 — P2 hardening, grouped A–F (crypto/identity, DoS bounds, routing/metric, 8-bit timer family, PHY/numeric parity, supply-chain hygiene).
• Findings → 4-sprint map (identity+integrity / path-diversity+self-heal / hardening / verification-parity) with E-ids + dependencies.
• 3 cooperation lanes for the next loop, executable once build(pipeline): pinned-t27c gen/rust + physical drift-guard (запрет писать в репо неправильно) #60 lands (Lane A control-plane auth · Lane B detection-module spec-correctness, gated on upstream codegen · Lane C routing feasibility + modem sync).

Synthesis/planning only — no code edited, no merge, no hardware, no fabricated metrics.

phi^2 + phi^-2 = 3