docs(#780): owner drops the QA shadow week; QA goes straight to the P3 flip

Claude-Session: https://claude.ai/code/session_01GT67ACmpMR7b9LGRPLijMi

docs/plans/2026-11-09-out-of-process-script-runner-design.md

@@ -709,7 +709,9 @@ per-shard state, restarts in the last hour and the quarantine list. Quarantines
      example 1 week on QA), not a mode to run in production.
    - Exit criterion: zero unexplained mismatches. This is where [A-7] / [A-8] get answered.
    - **Landed in lmxopcua#780 (P2 slice, record in §12.4):** `ShadowScriptRunner`, all three seams, bounded and
-     drop-counted, readiness untouched; docker-dev drill with alarms. The QA shadow week is still to run.
+     drop-counted, readiness untouched; docker-dev drill with alarms.
+   - **Owner decision 2026-11-12: no QA shadow week.** P2 ends with the docker-dev drill; `Shadow` stays available
+     as an opt-in diagnostic but is not a rollout gate. QA goes straight to P3.
 4. **P3, flip on QA, then the other tiers.**
    - Set `Scripting:Runner=OutOfProcess` per node, seam subset first (Calculation, then VT, then alarms; alarms
      last because of the 250 ms budget).
@@ -1643,7 +1645,7 @@ measures the §8 table: p50/p99 added latency, throughput at K=1/2/4, host CPU,
 **Live gates:**
 - docker-dev rig: a deploy with VTs, Calc tags and scripted alarms; drill a runaway script through the
   AdminUI and watch `/uns` go Bad, the quarantine appear, and siblings stay Good;
-- QA shadow week (P2);
+- ~~QA shadow week (P2)~~ — dropped by the owner 2026-11-12;
 - a QA flip with the same drill.
 
 ---