docs(plan): mark cert-audit + probe-tidy plan COMPLETE (live /run PASS)

docs/plans/2026-06-19-cert-audit-and-probe-deadletter-tidy.md.tasks.json

@@ -1,11 +1,18 @@
 {
   "planPath": "docs/plans/2026-06-19-cert-audit-and-probe-deadletter-tidy.md",
-  "executionState": "IN_PROGRESS",
+  "executionState": "COMPLETE",
   "tasks": [
-    {"id": 1, "subject": "Task 1: Cert-audit core — ActorAuditWriter + CertAuditEvents factory + DI + unit tests", "classification": "standard", "status": "pending", "parallelizableWith": [3]},
-    {"id": 2, "subject": "Task 2: Wire audit into CertificateStoreManager + Certificates.razor + extend manager tests", "classification": "standard", "status": "pending", "blockedBy": [1]},
-    {"id": 3, "subject": "Task 3: OpcUaProbeResult dead-letter tidy — three actor drop handlers + guard test", "classification": "small", "status": "pending", "parallelizableWith": [1]},
-    {"id": 4, "subject": "Task 4: Reconcile + full build/test + live /run + finish (merge + push)", "classification": "standard", "status": "pending", "blockedBy": [1, 2, 3]}
+    {"id": 1, "subject": "Task 1: Cert-audit core — ActorAuditWriter + CertAuditEvents factory + DI + unit tests", "classification": "standard", "status": "completed", "commits": ["084d73ea", "3ee0099f"]},
+    {"id": 2, "subject": "Task 2: Wire audit into CertificateStoreManager + Certificates.razor + extend manager tests", "classification": "standard", "status": "completed", "commits": ["23d45efc", "3eb370d4"]},
+    {"id": 3, "subject": "Task 3: OpcUaProbeResult dead-letter tidy — three actor drop handlers + guard test", "classification": "small", "status": "completed", "commits": ["de6ce147"]},
+    {"id": 4, "subject": "Task 4: Reconcile + full build/test + live /run + finish (merge + push)", "classification": "standard", "status": "completed", "commits": ["3eb370d4"]}
   ],
+  "liveRun": "PASS — rebuilt central-1/central-2 to the branch; both boot healthy (DI resolves CertificateStoreManager(IConfiguration, IAuditWriter) + ActorAuditWriter→singleton — the integration review's #1 risk), AddressSpaceApplier added=91, ZERO OpcUaProbeResult dead-letters on both nodes before+after. Cert-audit END-TO-END: Trust on the Certificates page (:9200) wrote ConfigAuditLog row 'multi-role-test | Certificate:Trust | Success | <thumbprint>' with DetailsJson omitting the error key — through the full live cluster seam to shared SQL.",
+  "verification": {
+    "solutionBuild": "0 errors",
+    "tests": "AdminUI.Tests 510/510, Runtime.Tests 273/273",
+    "review": "T1 spec PASS + code Approved(minors fixed); T3 code Approved; final integration review SHIP (one pre-merge discard fix applied)"
+  },
+  "finish": "ff-merged to master 40e8a23e..3eb370d4, pushed to gitea, branch deleted",
   "lastUpdated": "2026-06-19"
 }