comment #304
#297 field acceptance on b8482445 is PRODUCT RED (details on #297): the LAN bootstrap firewall pair is never written on a rule-heavy Windows host because reconcile's pre-write NetSecurity snapshot is killed at the 3000 ms child cap. 7 of 8 members remain fulfilled; #297 is not. Golden stays HELD. Referred to the operator: (A) fix rides v0.70.0 on a new candidate sha with consumer legs and field window redone, or (B) relocate #297 to #307 with the changelog/release notes corrected to disclose the shipped limitation (also a new sha). No golden hand-off until ruled.