Independent exact-head release review of d547b4887b2f478ea63b4da629e69f81d1d6b571: REQUEST_CHANGES / do not merge today. sanitizeEvidence() accepts arbitrary top-level fields despite the documented fail-closed schema. Reproduced locally: an otherwise valid evidence object containing patientDiagnosis, privateKey, deviceId, and adminCookie returned ok: true; those fields were silently dropped while the evidence could still be certified healthy. Strictly allowlist top-level keys and test each hostile field independently. Exact-head full gates were independently reported green (109/109 Node, 20/20 deploy, audit/syntax), and no real images, weights, or committed secrets were found, but this privacy/schema defect blocks merge.
[DAILY-DROP-INTAKE-FROZEN] 2026-08-23
Intake frozen. Snapshot: /root/daily-drop/drops/2026-08-23/TEAM-INTAKE.json