diff --git a/.scratch/distributed-gguf-runtime/issues/033-build-a-standalone-fake-c-grpc-shard-worker.md b/.scratch/distributed-gguf-runtime/issues/033-build-a-standalone-fake-c-grpc-shard-worker.md
index 8f506fd..feb196e 100644
--- a/.scratch/distributed-gguf-runtime/issues/033-build-a-standalone-fake-c-grpc-shard-worker.md
+++ b/.scratch/distributed-gguf-runtime/issues/033-build-a-standalone-fake-c-grpc-shard-worker.md
@@ -1,7 +1,7 @@
 <!-- GENERATED FROM prd.json — DO NOT EDIT AS AN INDEPENDENT SOURCE. prd.json IS AUTHORITATIVE. -->
 # DGR-033: Build a standalone fake C++ gRPC Shard worker
 
-- **Status / triage:** completed; `passes: true`
+- **Status / triage:** specification only; `ready-for-agent`; `passes: false`
 - **Execution mode:** `AFK`
 - **Milestone:** `M1`
 - **Dependencies:** `DGR-022`, `DGR-024`, `DGR-032`
@@ -18,11 +18,11 @@ Fresh Ralph session: read `.scratch/distributed-gguf-runtime/RALPH-CONTEXT.md`,
 
 ## Acceptance criteria
 
-- [x] A standalone C++ executable serves the complete lifecycle and stream RPC contract using the fake engine.
-- [x] Python integration tests cover startup, health, capability, fragmented prefill, decode, release, cancellation, and graceful shutdown.
-- [x] Bounded messages, deadlines, flow control, and independent session cancellation are enforced.
-- [x] The worker exposes neither llama.cpp RPC nor arbitrary graph execution.
-- [x] Applicable shared quality gates in `prd.json` pass, and the evidence handoff records exact commands/results, changed files, limitations, and dependency handoff.
+- [ ] A standalone C++ executable serves the complete lifecycle and stream RPC contract using the fake engine.
+- [ ] Python integration tests cover startup, health, capability, fragmented prefill, decode, release, cancellation, and graceful shutdown.
+- [ ] Bounded messages, deadlines, flow control, and independent session cancellation are enforced.
+- [ ] The worker exposes neither llama.cpp RPC nor arbitrary graph execution.
+- [ ] Applicable shared quality gates in `prd.json` pass, and the evidence handoff records exact commands/results, changed files, limitations, and dependency handoff.
 
 ## Shared quality gates
 
@@ -33,4 +33,4 @@ Fresh Ralph session: read `.scratch/distributed-gguf-runtime/RALPH-CONTEXT.md`,
 
 ## Evidence handoff
 
-Verified evidence: `.scratch/distributed-gguf-runtime/evidence/DGR-033/README.md`. Legacy evidence remains provenance only and grants no implementation completion credit.
+Write and verify `.scratch/distributed-gguf-runtime/evidence/DGR-033/README.md`. Until every criterion and applicable gate has real evidence, this story remains `passes: false`. Legacy evidence is provenance only, not completion credit.
diff --git a/.scratch/distributed-gguf-runtime/prd.json b/.scratch/distributed-gguf-runtime/prd.json
index 76403c3..7f86fae 100644
--- a/.scratch/distributed-gguf-runtime/prd.json
+++ b/.scratch/distributed-gguf-runtime/prd.json
@@ -656,13 +656,13 @@
         "The worker exposes neither llama.cpp RPC nor arbitrary graph execution.",
         "Applicable shared quality gates in `prd.json` pass, and the evidence handoff records exact commands/results, changed files, limitations, and dependency handoff."
       ],
-      "passes": true,
+      "passes": false,
       "notes": "Generated source issue: .scratch/distributed-gguf-runtime/issues/033-build-a-standalone-fake-c-grpc-shard-worker.md; prd.json is authoritative.",
       "blocks": [
         "DGR-036",
         "DGR-040"
       ],
-      "completionNotes": "Completed by agent"
+      "completionNotes": "Cross-review BLOCKED the initial implementation on pre-open activation acceptance, non-strict flow-control negotiation, in-stream release state retention, and fail-closed identity/version/range validation. Repair required before completion credit."
     },
     {
       "id": "DGR-034",