The SPEC-016 Phase B credential-store guard referenced "SPEC-017" for the forthcoming SYSTEM service host, but 017 is now Mike's end-user-access spec; the service host is SPEC-018. Comment + error-string text only, no logic change. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>