docs: record plan 02 hosted fix review

docs/execution/briefs/rereview-plan-02-hosted.md

@@ -0,0 +1,27 @@
+# Independent rereview: Plan 02 hosted feedback fix
+
+Review only in `/Users/amruth/orca/workspaces/reactive-resume/issue-3181-recovery-procedure`.
+Exact target head: `325d1fcd1e2ea3744896c1688c6f6c0bfc3dd5ce`. Do not edit tracked files, commit, push, reply,
+resolve threads, publish, merge, or mutate issues.
+
+Read current repository instructions, pinned approved Plan 02, prior review reports, hosted-review fix report, full
+`origin/main...HEAD` diff, live PR #3460, and all four unresolved hosted threads. Refresh base and verify exact head.
+Run root Intent inventory and load matching review skill if any; no subagents.
+
+Review Standards and Spec independently. Verify especially:
+
+- `caseId`, `sourceResumeId`, and non-null `targetResumeId` reject all Unicode control (`Cc`) and format (`Cf`)
+  characters, including embedded and format-only U+200B, U+2066, U+202E, and U+FEFF values;
+- safe accepted identifiers remain byte-preserving and unnormalized;
+- strict current-v5 canonical equality and duplicate-member scanner remain fail-closed;
+- autofix cleanup is retained and no scope expansion or contract weakening occurred;
+- migration guidance exactly matches executable validation and does not imply raw-v4 conversion or real recovery;
+- Codacy scanner-complexity and scanner-coverage comments are non-actionable or already satisfied, and relaxing
+  canonical equality would violate approved direction;
+- all 83 comparator cases and independent adversarial probes are mutation-sensitive enough to catch removal or partial
+  application of the `Cf` guard.
+
+Run focused comparator/API/auth tests, affected typechecks, boundaries, narrow non-writing Biome/Markdown lint,
+static-import, diff/base/scope gates, and any small independent probes needed. Report findings first with severity and
+anchors, publication verdict, exact head, and hosted-thread disposition in `.orchestration/plan-02-hosted-rereview.md`;
+send `worker_done`.