docs(closeout): reviewer's two residual-record asks — alarms-hub redaction gap named, ConstraintText artifact recorded; all 12 tasks complete

docs/plans/2026-08-17-deferred-closeout.md

@@ -424,6 +424,12 @@ Follow-ups recorded, not started:
   `scripts/check-codegen.ps1` would close it).
 - `EffectiveDashboardConfiguration` (dashboard settings page) doesn't display
   `GroupToTag` / `UntaggedSessionVisibility`, though it shows `GroupToRole`.
+- ApiKeysPage's `ConstraintText` neither offers tag input nor lists `DashboardTags`,
+  and since `IsEmpty` now counts tags, a tags-only key renders `-` where a truly
+  unconstrained key renders `unconstrained` — two spellings of one meaning.
+- `AlarmsHubPublisher` broadcasts alarm transitions with `current_value`/`limit_value`
+  unredacted — the `ShowTagValues` redaction covers only the events hub mirror
+  (pre-existing; now noted in `docs/GatewayConfiguration.md`).
 - The alarm probes' remaining questions (ack-leg GUID stability, `@COUNT` semantics)
   unblock via the paths in `docs/AlarmProbeFindings.md`.
 

docs/plans/2026-08-17-deferred-closeout.md.tasks.json

@@ -12,7 +12,7 @@
     { "id": 9, "subject": "Task 9: Client regeneration + rebuild for new alarm fields", "status": "completed", "blockedBy": [8] },
     { "id": 10, "subject": "Task 10: Phase gate — full gateway suite on macOS", "status": "completed", "blockedBy": [1, 4, 5, 6, 7, 8, 9] },
     { "id": 11, "subject": "Task 11: windev gate — full Windows verification", "status": "completed", "blockedBy": [2, 10] },
-    { "id": 12, "subject": "Task 12: Wrap-up — closure notes, umbrella check, final review", "status": "pending", "blockedBy": [11] }
+    { "id": 12, "subject": "Task 12: Wrap-up — closure notes, umbrella check, final review", "status": "completed", "blockedBy": [11] }
   ],
   "lastUpdated": "2026-08-17T00:00:00Z"
 }