[deku2026]

Plan record PR (state and ledger only, written by tools/plan.py; execution-policy section 4 "Plan record PRs": no independent review; both required statuses at the head).

AF-CTR-04 -> complete

• Why now: Plan plan: AF-CTR-04 delivered (complete after the Windows reruns at the post-#71 main); start AF-CTR-05 with its P0 scope #82 (merged 39ec6e6) recorded AF-CTR-04 delivered, with complete waiting on re-runs at the post-docs: remove hardcoded reviewer model requirements #71 main. ArcForges docs: remove hardcoded reviewer model requirements #71 changed CloudLink product code (CloudLinkService.cs, NodeKeyStore.cs, SignInOrchestrator.cs) after part X, the hosted OS secret-store tier run and the keys rerun, all of which ran on 978d25d. All three re-runs passed at ArcForges main 4bc33da (docs: record MR-18 verification and stop after this item #70's merge, which contains docs: remove hardcoded reviewer model requirements #71):
  1. Windows OS secret-store tier: run 42061577006 (workflow_dispatch at 4bc33da), success. REAL: the GitHub-hosted Windows Credential Manager and CNG user key store.
  2. X item 1, the Windows node against proof: PASSED (logs/evidence/x-ctr04-2026-11-05/rerun-4bc33da/).
     • CloudSignInTests device-1, pkce-1 and pkce-2: 1/1. node-approve: 14 steps, one attempt each.
     • pkce-1 was handed back by the manual link and pkce-2 by the page's script, both to the node's real loopback receiver.
     • devicesLeft 0, and the Windows cmdkey count is unchanged (773).
     • REAL: the node, the receiver, proof and Chromium 153. MOCKED: the authenticator and the opener.
  3. Keys check: PASSED (logs/evidence/x-ctr04-2026-11-05/keys-rerun-4bc33da/).
     • It ran as a local official-hosted rehearsal on real PostgreSQL, as originally recorded. It did not run on proof, which has no command keys registered.
     • After sign-in and after the refreshes, the node held exactly rehearsal-cmd-a and rehearsal-cmd-b.
     • The keys are throwaway: only their public halves were registered, and the private halves were deleted.
• Deferred real-world validation (acceptance register; never blocks complete): AR-08 (the mobile native authorization on a phone, with H-02), AR-23 (a real platform authenticator) and AR-24 (a real node sign-in outside test mode).
• set-state AF-CTR-04 complete was run without --pr/--merge: the evidence is unchanged since plan: AF-CTR-04 delivered (complete after the Windows reruns at the post-#71 main); start AF-CTR-05 with its P0 scope #82. The ledger line was written with plan.py ledger AF-CTR-04 complete, as in Plan plan: AF-CTR-03 complete (the E4-INTERNAL repair, Cloud #129, merged) #79.

Checks

• plan.py validate --design <Design main 5da245e>: 0 errors (63 tasks, 17 milestones).
• check_design --plan: 0 errors, 3 notes.
• Plan tests: 48 OK. The QUIET-HOST check ran in the same command line.
• git diff --check: clean.
• Diff: delivery-graph.json (one state), sequence.md (generated) and ledger/ledger.jsonl (+1 line).

🤖 Generated with Claude Code

https://claude.ai/code/session_01H6Cf6kHnz1ZkfURhVWvGjP