Codex whole-branch review found what per-task TDD structurally missed: P1 oauthScopes grants community.post but NOT postv2 (core write path unscoped); P2 DeciderDeps built with nil Admissions → firehose §8 quota silently disabled in prod; P3 editNote removed from a published lexicon (non-additive). Tool data-safety: P4 blob bytes not copied to author repo; P5 langs/tags/crosspost/bridgedStats stripped (irreversible loss); P6 verify adopts a foreign record at the deterministic rkey; P7 crash-between-delete-and-MarkDone strands a migrated row while Complete goes true; P8 census not preflighted; P9 rkey is a non-TID digest in a key:tid collection. Seams: buildDeciderDeps extraction (bug intact), LegacyPost.RawRecord (lossless source), ListResumable. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>