Mission Run Overview
Mission Run: Meta.json Fail-Closed Read Routing
Make every mission meta.json read fail loud on corruption instead of silently accepting a bad file.
meta.json is a mission's canonical identity and VCS-lock record. Several git ref-advance, implement, and merge-driver code paths still read it through ad-hoc parsers that silently accept a corrupt or truncated file, risking split-brain or wrong-authority mission state. This mission routes every remaining read through the one fail-closed seam (adding the missing pure-decode tier those blob-fed reads need), unifies a duplicated VCS-lock comparison that can currently return contradictory verdicts on the same file, and records the governance decision on the read allow-list — so a bad meta.json is caught, not absorbed.