TDD run (2 cycles) + probe-driven plan review (killed the reservation-stored-rkey and ProcessAdmission-entry designs pre-code) + mandated ten-stream security review + 9-pin red-first fix batch. make ci green (5120/0/0). Ships: CreatePost writes postv2 into the AUTHOR's repo via session (bucket-quantized deterministic TID rkey → retry- idempotent create-only converge-by-reading), sync fast path via engine.AcceptSubmission, post.update NEW (swap/409, validated, ledger-untouched), two-collection delete, blobs follow the post to the author's PDS both sides (single validation choke-point), aggregator stored-token writes. Review catches fixed: the seed-rewind that PUBLISHED a false acceptance for superseded content (§5.5 outcome — the headline); UpdatePost validation bypass (validate:false made app-level the only gate); the dead community-token step that 500'd the remote pending flow; SSRF + unbounded buffer on the thumbnail fetch; ErrNoCommit-on-update; lexicon status field. Security mandate: bypass enumeration CLEAN (firehose re-derives full admission independently). PRD rev 2.7. DEPLOY GATE: must not ship ahead of task 7 (reads are status-agnostic until then). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>