glm-5.3-flash 671a779ce3 docs(review): close the wave-4 review gate — verdict green (review-wave-4) ...

- Gate reading recorded line by line: client.md (dial surface, op
  rows, acceptor, lifecycle primitives), ADR-003 symmetry, ADR-005/
  OQ-05/OQ-07, bounded resources, tracing, smokes, docs honesty —
  all confirmed
- Wave-3 gate booked items 1-4 verified discharged; item 5 verified
  still booked with its owners (nothing absorbed)
- Inline fix: the accepted-open handoff counter now releases on
  completion or unwind (HandoffCapGuard panic-safety; a panicking
  assembly acceptor can no longer strand a held slot) + unit row
- Inline fix: lib.rs crate-level wave-state doc sentence (stale
  over w4-lifecycle)
- w4-reverse-listen / w4-lifecycle Summary placeholder lines filled

Verification: cargo test (default / --all-features / --features
tunnel) all green; clippy x2 -D warnings clean; cargo fmt --check
clean; cargo doc --no-deps 0 warnings; taskgraph validate (35 tasks)

2026-10-29 17:59:54 +00:00

..

review-wave-1.md

docs(tasks): close the wave-1 review gate — verdict green

2026-10-28 07:22:24 +00:00

review-wave-2.md

docs(tasks): close the wave-2 review gate — verdict green

2026-10-28 11:53:51 +00:00

review-wave-3.md

docs(review): close the wave-3 review gate — verdict green (review-wave-3)

2026-10-29 05:22:14 +00:00

review-wave-4.md

docs(review): close the wave-4 review gate — verdict green (review-wave-4)

2026-10-29 17:59:54 +00:00

w1-config.md

feat(config): land the configuration surface (serve-config, dial-config, Limits)

2026-10-28 06:57:52 +00:00

w1-error-model.md

feat(error): land the fail-closed key-source error taxonomy

2026-10-28 06:22:52 +00:00

w1-fingerprint.md

feat(fingerprint): land the single fingerprint path + ssh-keygen parity vectors

2026-10-28 06:27:49 +00:00

w1-host-key-policy.md

feat(host-key): land the HostKeyPolicy seam (OQ-05, policy-blind)

2026-10-28 06:40:40 +00:00

w1-key-sources.md

feat(key-source): land the vault-backed key sources (ADR-005 custody in code)

2026-10-28 06:45:56 +00:00

w1-manifest.md

build(manifest): land wave-1 dependency set and ADR-003 feature graph

2026-10-28 06:20:20 +00:00

w1-test-doubles.md

test(doubles): land the wave-1 in-memory seams + unified ed25519 fixtures

2026-10-28 07:09:17 +00:00

w2-auth-bridge.md

feat(auth): land the ADR-004 dispositional auth bridge (w2-auth-bridge)

2026-10-28 08:33:57 +00:00

w2-bounded-resources.md

docs(tasks): close the wave-2 review gate — verdict green

2026-10-28 11:53:51 +00:00

w2-dispatch-decline-core.md

docs(tasks): close the wave-2 review gate — verdict green

2026-10-28 11:53:51 +00:00

w2-loopback-harness.md

docs(tasks): close the wave-2 review gate — verdict green

2026-10-28 11:53:51 +00:00

w2-server-mount.md

feat(server): land the SshAdapter mount + russh Config construction (w2-server-mount)

2026-10-28 07:51:50 +00:00

w2-spawn-return.md

feat(serve): land the spawn-and-return plumbing + exit/status mechanics (w2-spawn-return)

2026-10-28 11:04:17 +00:00

w3-decline-tracing.md

feat(observe): land the decline-path event vocabulary (w3-decline-tracing)

2026-10-28 17:50:49 +00:00

w3-git-mapping.md

feat(git): land the git mapping — the exec grammar + the alkgit dispatch (w3-git-mapping)

2026-10-28 20:03:10 +00:00

w3-seam-config.md

feat(config): land the wave-3 per-feature family-seam handles (w3-seam-config)

2026-10-28 16:12:03 +00:00

w3-tty-session.md

feat(session): land the session mapping — the translation bridge + the exit derivation (w3-tty-session)

2026-10-28 20:29:59 +00:00

w3-tunnel-direct.md

feat(tunnel): land the route-1 bridge — direct-tcpip + streamlocal served for real (w3-tunnel-direct)

2026-10-29 03:23:20 +00:00

w3-tunnel-listen.md

feat(tunnel): land the -R listen flow + the forwarded-tcpip data leg (w3-tunnel-listen)

2026-10-29 04:24:50 +00:00

w4-channel-not-held-rows.md

test(mapping): land the channel-not-held guard's wire rows on all three served rows (w4-channel-not-held-rows)

2026-10-29 07:27:59 +00:00

w4-dial.md

feat(client): land the dial surface — the authenticated connection handle + the fail-closed client handler skeleton (w4-dial)

2026-10-29 14:07:15 +00:00

w4-git-exit-close.md

fix(git): status-before-close by construction — the split-halves seam duplex (w4-git-exit-close)

2026-10-29 07:01:33 +00:00

w4-lifecycle.md

docs(review): close the wave-4 review gate — verdict green (review-wave-4)

2026-10-29 17:59:54 +00:00

w4-op-rows.md

feat(client): land the op rows — exec/pty, direct-tcpip, git exec, sftp placeholder (w4-op-rows)

2026-10-29 16:21:25 +00:00

w4-reverse-listen.md

docs(review): close the wave-4 review gate — verdict green (review-wave-4)

2026-10-29 17:59:54 +00:00

w4-router-collision.md

feat(tunnel): ListenRouter token-collision pre-check — refuse, never replace (w4-router-collision)

2026-10-29 07:56:24 +00:00

w4-tty-coverage.md

test(tty): wire-witness the channel_close cancel path + the no-exit-chunk close shape, record the write_all no-deadline limit (w4-tty-coverage)

2026-10-29 07:46:16 +00:00