docs(plans): remediation gate evidence — full test run, code review, rig rebuild + Flow Debugger drill steps H/I pass; ledger complete

Claude-Session: https://claude.ai/code/session_01NcMG6xXdsJbmD2wYAgkK29

docs/plans/2026-09-06-flow-debugger-arch-review-remediation.md.tasks.json

@@ -102,11 +102,11 @@
     {
       "id": 14,
       "subject": "Task 14: full gate \u2014 build, tests, rig, verify",
-      "status": "in_progress",
+      "status": "completed",
       "blockedBy": [
         13
       ]
     }
   ],
-  "lastUpdated": "2026-09-06T18:35:52.315083Z"
+  "lastUpdated": "2026-09-06T18:46:58.108183+00:00"
 }

docs/plans/2026-09-06-flow-debugger-arch-review.md

@@ -356,3 +356,15 @@ One test defect surfaced by §3's performance commits was fixed on the same bran
 `OperationTrackingStoreTests.ReadChangedSince_BoundaryTimestamp…` raced the new single-writer
 queue (a missing `FlushAsync` before the test's direct `UPDATE`) — `86451382` test(site-runtime):
 flush the tracking-store queue before the boundary-timestamp test's direct UPDATE.
+
+### 7.1 Gate evidence (2026-09-06, branch `fix/flow-debugger-arch-review`)
+
+- Full `dotnet test ZB.MOM.WW.ScadaBridge.slnx` on the merged branch: 30 projects; the only failures are the
+  11 known role-negative Playwright tests (login-disabled rig, §6) and one Central UI drill-in test that pinned
+  the old "~7 audit rows" help text, fixed in `6c9ea39f`. A code review of the merged diff (opus, read-only)
+  found one Medium residual — the runner's own synthesized inbound / root rows were returned un-redacted —
+  fixed with the spawner rule, byte-budget doc claim and CLI ceiling note in `f17bae09`; the two larger
+  follow-ups it raised are register rows 112 (site-side `Truncated` flag) and 113 (F2 gates routed traffic only).
+- Rig: `bash docker/deploy.sh` rebuilt all 8 nodes; `FLOW_ONLY=1 docker/verify-delmia-notifier.sh` →
+  `H live+replay YES` (live 11 events, replay 17) and `I outbound live+replay YES` (api / db / notify
+  Delivered on replay).