docs(archreview): file residual follow-ups as Gitea issues #456-#459

The 4 non-blocking residuals (#10 live-gate/ResilienceConfig sub-gap, R2-11 Phase C
strict parsers, CVE-2025-6965 suppression removal, SBR oldest-node failover gap) are
now tracked as Gitea issues, cross-referenced in the STATUS.md capstone.

archreview/plans/STATUS.md

@@ -240,6 +240,17 @@ it found + fixed the read-leg wall-clock gap (PR #453). R2-08's GLAuth outage-cy
 **CLOSED (2026-07-15, 6/6)** and R2-06 (6/6, 2026-07-13) — both vs. the local 0.2.0 gateway + real historian over VPN.
 **Every Round-2 live gate is now GREEN — no Round-2 items remain unexercised.**
 
+### Residual follow-ups — tracked in Gitea (2026-07-15)
+
+The remaining non-blocking items are filed as issues (none gate the remediation, which is complete):
+
+| Issue | Item | Nature |
+|---|---|---|
+| **#456** | #10 — observe retry/breaker firing in live dispatch; thread `ResilienceConfig` into the deploy artifact (tier-defaults only today) | niche / sub-gap |
+| **#457** | R2-11 Phase C — flip runtime parsers to strict, after fleets run `TagConfigValidationMode=Error` clean | deliberately deferred (operational rollout) |
+| **#458** | Remove the `NuGetAuditSuppress` for CVE-2025-6965 once a patched SQLitePCLRaw bundle ships | upstream-gated |
+| **#459** | SBR topology — crashing the OLDEST Akka node does not fail over | pre-registered user-deferred design gap |
+
 Brought up the 2-node central cluster (`central-1`+`central-2`, SQL, traefik) from source at merged master `6aeb53a9`
 (single-tenant rig; drove the `:9200` AdminUI via browser + Client.CLI on `:4840`/`:4841`).