cemililik · Oct 23, 2026 · Oct 18, 2026 · Oct 18, 2026 · Oct 18, 2026 · Oct 18, 2026
diff --git a/.claude/skills/add-background-job/SKILL.md b/.claude/skills/add-background-job/SKILL.md
@@ -50,7 +50,7 @@ Use [implement-task](../implement-task/SKILL.md) as the substantive entry point.
 ### 1. Check the delivered boundary
 
 Read the feature roadmap and current
-[P02b-4 record](../../../docs/roadmap/phase-02b-events-auth.md#p02b-4-decision-package-2026-10-15).
+[P02b-4 record](../../../docs/roadmap/phase-02b-delivery-log.md#p02b-4-decision-package-2026-10-15).
 P02b-4 intentionally carries no production business definitions or recurrence
 manifests. The first feature must explicitly reconcile that infrastructure-only
 census when its own accepted phase delivers real definitions.

diff --git a/.claude/skills/add-frontend-route/SKILL.md b/.claude/skills/add-frontend-route/SKILL.md
@@ -135,7 +135,7 @@ entry before rebuilding downstream request headers. The caller verifies the
 envelope again. G35 and G36 are recorded in
 [Phase 02d's decision register](../../../docs/roadmap/phase-02d-walking-skeleton.md#the-decision-register).
 Don't read `host` directly inside a page. The
-[public entry matrix](../../../docs/roadmap/phase-02d-walking-skeleton.md#public-entry-matrix)
+[public entry matrix](../../../docs/roadmap/phase-02d-delivery-log.md#public-entry-matrix)
 is authoritative: bootstrap the live host before locale/redirect decisions;
 enabled-locale membership precedes `courses` shorthand and exact `/studio` or
 `/portal` scaffold handling. Disabled/malformed/unknown prefixes fail closed;
@@ -148,7 +148,7 @@ through bootstrap and the configured caller; Phase 11 owns participation/samplin
 requires native GET/HEAD admission on every HTTP callback path, including
 middleware-exempt health/assets/scaffolds, with masked no-store refusal of other
 methods and bodyless HEAD. Production upgrades close; development retains only
-validated GET HMR. The [remediation record](../../../docs/roadmap/phase-02d-walking-skeleton.md#remediation-step-2--native-ingress-and-url-boundary)
+validated GET HMR. The [remediation record](../../../docs/roadmap/phase-02d-delivery-log.md#remediation-step-2--native-ingress-and-url-boundary)
 owns validation and both independent review rounds. Do not add
 Server Actions/write routes or WebSocket consumers without an explicit owning
 Phase 02b/Phase 06
@@ -238,9 +238,9 @@ locale, document language and actual resolved-label language.
 
 The guarded frontend suite supplies ICU, argument and callsite checks. No
 `lint:i18n` command or screenshot/axe tooling exists. The
-[Step 1 delivery record](../../../docs/roadmap/phase-02d-walking-skeleton.md#p02d-6-step-1-localization-and-document-foundation)
+[Step 1 delivery record](../../../docs/roadmap/phase-02d-delivery-log.md#p02d-6-step-1-localization-and-document-foundation)
 owns foundation validation; the
-[packet closeout](../../../docs/roadmap/phase-02d-walking-skeleton.md#p02d-6-packet-closeout-2026-10-10)
+[packet closeout](../../../docs/roadmap/phase-02d-delivery-log.md#p02d-6-packet-closeout-2026-10-10)
 records the delivered product proof and scoped manual accessibility checks.
 
 ### Step 8: Public-site SSR caching
@@ -296,7 +296,7 @@ document, one per fixed status/scaffold document and three per followed missing
 document. Metadata/layout/page/UI share the admitted snapshot without another
 bootstrap or cross-request cache. HEAD/RSC/prefetch and Flight fallback require
 separately proven counts. The
-[Step 3 record](../../../docs/roadmap/phase-02d-walking-skeleton.md#adr-0055-step-3--production-admission-proof-and-closeout)
+[Step 3 record](../../../docs/roadmap/phase-02d-delivery-log.md#adr-0055-step-3--production-admission-proof-and-closeout)
 records passing production replacement proofs, completed reviews and verified fixes.
 
 ### Step 10: Tests
@@ -319,7 +319,7 @@ records passing production replacement proofs, completed reviews and verified fi
   catalog/course/lesson routes under
   [ADR-0056](../../../docs/decisions/0056-public-demo-browser-and-lighthouse-enforcement.md).
   Preserve its production-page admission, hard budgets and owned cleanup. The
-  [P7 Step 4 record](../../../docs/roadmap/phase-02d-walking-skeleton.md#p02d-7-step-4--ci-enforcement-and-phase-exit-2026-10-11)
+  [P7 Step 4 record](../../../docs/roadmap/phase-02d-delivery-log.md#p02d-7-step-4--ci-enforcement-and-phase-exit-2026-10-11)
   owns completed G44/G45 enforcement; Phase 06 still owns broader Playwright/axe
   coverage.
 

diff --git a/.claude/skills/add-i18n-key/SKILL.md b/.claude/skills/add-i18n-key/SKILL.md
@@ -24,9 +24,9 @@ Manage user-facing translations in `apps/web` consistently per
 > [ADR-0027](../../../docs/decisions/0027-frontend-i18n.md) selects exact
 > `next-intl` 4.14.9 and the catalogue home below. Step 1 installs the runtime,
 > complete English/Turkish catalogues and guarded ICU/callsite checks. Its
-> [delivery record](../../../docs/roadmap/phase-02d-walking-skeleton.md#p02d-6-step-1-localization-and-document-foundation)
+> [delivery record](../../../docs/roadmap/phase-02d-delivery-log.md#p02d-6-step-1-localization-and-document-foundation)
 > owns foundation validation; the
-> [packet closeout](../../../docs/roadmap/phase-02d-walking-skeleton.md#p02d-6-packet-closeout-2026-10-10)
+> [packet closeout](../../../docs/roadmap/phase-02d-delivery-log.md#p02d-6-packet-closeout-2026-10-10)
 > records the scoped product and manual accessibility evidence. No
 > `pnpm lint:i18n`, `no-literal-strings`, `_deprecated.json`, screenshot or
 > `axe-core` task exists today; do not claim those checks run.

diff --git a/.claude/skills/add-integration-event/SKILL.md b/.claude/skills/add-integration-event/SKILL.md
@@ -30,14 +30,14 @@ owns immediate producer admission, completion and payload policy. P02b-1
 Steps 2/3 implement immediate enqueue, payload admission, successful-save
 collection and the completed-provisioning publisher. Step 4 implements the
 production censuses and catalogue enforcement; the
-[delivery record](../../../docs/roadmap/phase-02b-events-auth.md#p02b-1-step-4--producer-enforcement-and-closeout-2026-10-12)
+[delivery record](../../../docs/roadmap/phase-02b-delivery-log.md#p02b-1-step-4--producer-enforcement-and-closeout-2026-10-12)
 owns final verification and review status.
 Accepted [ADR-0046](../../../docs/decisions/0046-durable-event-delivery-and-recovery.md)
 owns dispatcher recovery, subscription readiness and the shared inbox contract.
 P02b-2 implements producer dispatch; P02b-3 Steps 1–4 implement durable
 acceptance, shared inbox/ledger storage, independent execution and scheduling.
 Step 5 supplies the real default subscriptions and semantic Seeder handoff; the
-[delivery record](../../../docs/roadmap/phase-02b-events-auth.md#p02b-3-step-5--useful-defaults-and-semantic-seed-handoff-2026-10-13)
+[delivery record](../../../docs/roadmap/phase-02b-delivery-log.md#p02b-3-step-5--useful-defaults-and-semantic-seed-handoff-2026-10-13)
 owns validation/review status.
 
 ## When to use

diff --git a/.claude/skills/add-page-block/SKILL.md b/.claude/skills/add-page-block/SKILL.md
@@ -66,7 +66,7 @@ and [17-page-builder.md](../../../docs/architecture/17-page-builder.md).
 > and no active URL sink. The wider registry and component sketches below remain
 > Phase 04/05 and Phase 06 targets. The existing key lists in
 > `src/lib/customization/` are not renderer implementations. See the
-> [accepted package](../../../docs/roadmap/phase-02d-walking-skeleton.md#p02d-6-accepted-answers).
+> [accepted package](../../../docs/roadmap/phase-02d-delivery-log.md#p02d-6-accepted-answers).
 
 `RegisterPrimitive`, `BlockRenderer`, `resolver.registerPrimitive` and
 `useContentEntries` below are illustrative future APIs, not existing symbols to
@@ -216,7 +216,7 @@ the page.
   planted controls, localized product-page semantics and real manual keyboard,
   focus, reflow, contrast and screen-reader evidence. Step 3 implements the
   applicable lint controls and synchronous lesson semantics. The
-  [Step 4 record](../../../docs/roadmap/phase-02d-walking-skeleton.md#p02d-6-step-4-product-proof-and-accessibility-closeout)
+  [Step 4 record](../../../docs/roadmap/phase-02d-delivery-log.md#p02d-6-step-4-product-proof-and-accessibility-closeout)
   records product proofs and the scoped manual browser/screen-reader checks.
 - [Performance Standards](../../../docs/standards/15-performance.md) governs pages
   embedding the block. P02d-7's shared `make demo DEMO_MODE=ci` proof supplies

diff --git a/.claude/skills/code-review/SKILL.md b/.claude/skills/code-review/SKILL.md
@@ -83,7 +83,7 @@ Walk every change against the project's
 | **Authn / authz** | Every new endpoint has `[Authorize(Policy=…)]` or `[AllowAnonymous]` with a comment. Policy keys exist in the permission registry. Resource-scope handlers (`instructor` edits own course only) present where needed. |
 | **Tenant id from the resolved context only** | Resolved per [ADR-0036](../../../docs/decisions/0036-tenant-resolution-trusted-inputs.md): from the host lookup of the effective host, or on a platform host from validated claims confirmed by live membership; off HTTP, from the validated authoritative job row or the integration-event envelope. Never from a request body, query string, cookie or tenant header — `X-Tenant-Id` and `X-Organization-Id` are assertions that can only reject, on every hop. Check command and DTO surfaces. |
 | **SQL injection** | EF Core LINQ or `FromSqlInterpolated`; never raw string concatenation. Raw SQL has parameters. |
-| **XSS** | No `dangerouslySetInnerHTML` outside a sanitisation wrapper; CSP nonces in place; markdown via allowlist. Nothing sets a CSP today: the [standards index](../../../docs/standards/README.md#honest-status-today) row for Security Standards carves § HTTP Headers out to [Phase 11](../../../docs/roadmap/phase-11-production-hardening.md#security), so a missing nonce is not a Blocker until that phase sets one. Accepted P02d-6 G42 requires atomic four-color validation and a fixed style element, with whole-palette fallback; output must be safe without CSP. [The accepted package](../../../docs/roadmap/phase-02d-walking-skeleton.md#p02d-6-accepted-answers) owns its proof obligations; acceptance alone is not delivery. |
+| **XSS** | No `dangerouslySetInnerHTML` outside a sanitisation wrapper; CSP nonces in place; markdown via allowlist. Nothing sets a CSP today: the [standards index](../../../docs/standards/README.md#honest-status-today) row for Security Standards carves § HTTP Headers out to [Phase 11](../../../docs/roadmap/phase-11-production-hardening.md#security), so a missing nonce is not a Blocker until that phase sets one. Accepted P02d-6 G42 requires atomic four-color validation and a fixed style element, with whole-palette fallback; output must be safe without CSP. [The accepted package](../../../docs/roadmap/phase-02d-delivery-log.md#p02d-6-accepted-answers) owns its proof obligations; acceptance alone is not delivery. |
 | **CSRF** | Server Actions / Auth.js session check; non-Action mutating fetches carry CSRF tokens. |
 | **Secrets** | No secret in source / appsettings / env-file-committed; reads through `ISecretProvider`. No log of token / password / national id. |
 | **PII redaction** | `[PiiSensitive]` fields carry `SensitiveTokenCatalog.RedactedValue` in audit snapshots — the property stays, so the diff still records *that* it changed; logs don't carry raw PII. |

diff --git a/.claude/skills/implement-task/SKILL.md b/.claude/skills/implement-task/SKILL.md
@@ -171,7 +171,8 @@ match the change:
   for prerequisites, artifact review and cleanup. The Playwright library proof
   covers nine seeded pages and 27 audits; Phase 06 owns the full Playwright Test/
   axe suite. There is no `pnpm test:a11y` or `pnpm test:e2e` script.
-- Documentation-only → broken-link sweep + `docs/analysis/` residual scan
+- Documentation-only → `make lint-docs` (whole-tree fragment audit and roadmap
+  structure guard) + broken-link sweep + `docs/analysis/` residual scan
   (see Step 7's link audit).
 
 A failing test is the work telling you to keep going. Fix the underlying issue;
@@ -187,7 +188,14 @@ list, update what applies, leave nothing stale:
 
 - **Roadmap.** Did this phase deliver something new? Update the phase doc's
   Deliverables / Completion Criteria. Did this complete a phase exit
-  criterion? Note it.
+  criterion? Note it. A packet's decision package, step record, review round,
+  correction or closeout is a dated `###` entry under its packet in the phase's
+  `phase-<id>-delivery-log.md`, never a section of the phase doc; the phase
+  doc changes only the packet's Status row. Read a log through the generated
+  index at its top, never whole, and run `make docs-index` after adding an
+  entry. Do not narrate packet status in
+  `CLAUDE.md`, the repository README or the roadmap index
+  ([ADR-0069](../../../docs/decisions/0069-phase-documents-and-delivery-logs.md)).
 - **Standards.** Did the change introduce a new rule or refine an existing
   one? Update the relevant standard + cite the ADR (use
   [write-adr](../write-adr/SKILL.md) if the rule deserves one).

diff --git a/.claude/skills/local-dev-setup/SKILL.md b/.claude/skills/local-dev-setup/SKILL.md
@@ -313,7 +313,7 @@ state.
 ## Validation
 
 [ADR-0053](../../../docs/decisions/0053-trusted-public-server-rendering.md)
-and the [P5 package](../../../docs/roadmap/phase-02d-walking-skeleton.md#p02d-5-decision-package-2026-10-08)
+and the [P5 package](../../../docs/roadmap/phase-02d-delivery-log.md#p02d-5-decision-package-2026-10-08)
 own the accepted host/TLS/transport contract. P02d-7 supplies foreground `make demo`
 and CI browser/audit mode. Follow README Quickstart for production-build launch,
 owned cleanup, retained local data and stale-lock handling. The packet's Step 4

diff --git a/.claude/skills/run-tests-locally/SKILL.md b/.claude/skills/run-tests-locally/SKILL.md
@@ -173,7 +173,7 @@ an existing user process. P6 adds separate production product modes for foundati
 pagination, presentation, concurrent isolation and freshness/failure states. Those
 HTTP/HTML/RSC proofs do not claim browser or screen-reader execution; P6's manual
 accessibility closeout is recorded with its tested scope in the
-[packet closeout](../../../docs/roadmap/phase-02d-walking-skeleton.md#p02d-6-packet-closeout-2026-10-10).
+[packet closeout](../../../docs/roadmap/phase-02d-delivery-log.md#p02d-6-packet-closeout-2026-10-10).
 New UI changes require their own applicable manual checks; P7 supplies the narrow
 seeded browser demo described below.
 
@@ -188,7 +188,7 @@ to its certificate's public-key fingerprint; it does not use a personal profile.
 Browser observations cover a refused Flight followed by stock Next's fresh document
 navigation and separately counted API calls. HMR controls cover source recompilation
 and a fresh live site snapshot in the same development process. The
-[Step 3 record](../../../docs/roadmap/phase-02d-walking-skeleton.md#adr-0055-step-3--production-admission-proof-and-closeout)
+[Step 3 record](../../../docs/roadmap/phase-02d-delivery-log.md#adr-0055-step-3--production-admission-proof-and-closeout)
 owns actual execution, completed reviews and verified fixes. This probe remains
 separate from P7's browser demo/Lighthouse and Phase 06's full Playwright Test/axe.
 
@@ -221,6 +221,25 @@ It runs nine linked product pages and 27 cold Lighthouse audits over one unchang
 API/build/database, with real admission pacing and certificate-specific trust.
 Missing browser installation fails the proof rather than skipping it.
 
+The hosted workflow bounds APT mirror acquisition with one retry and 15-second
+HTTP/HTTPS timeouts in an exclusively created temporary configuration fragment.
+It checks the effective settings as root without evaluation, then removes only
+that fragment on shell exit. Sources, package verification, the complete
+Playwright dependency set and the five-minute installation limit stay intact.
+This is hosted setup handling, not a workstation prerequisite or a guarantee of
+total setup duration. The actual workflow-shell controls live in
+`frontend/apps/web/src/test/public-demo-ci.test.ts`.
+
+The workflow's outer setup/proof allowance ends at minute 17 from its first
+step, reserving three minutes within the same 20-minute job ceiling. The native
+proof and cleanup retain their separate 12-minute and 30-second caps. Sandbox
+cleanup and workflow-receipt commands receive TERM after 15 seconds and KILL
+after five more; artifact upload retains its one-minute step limit. The nominal
+35 + 20 + 20 + 60-second tail leaves 45 seconds for runner/post overhead, not a
+worst-case scheduling guarantee. A forced stop or unconfirmed cleanup fails.
+This job restores the existing NuGet cache without a save post-hook; cache
+misses still use ordinary dependency restoration.
+
 On GitHub-hosted Linux runners, run `node scripts/ci-public-chromium.mjs prepare`
 after installation and before the lifecycle, then run
 `node scripts/ci-public-chromium.mjs cleanup` in an always-running cleanup step.
@@ -242,7 +261,7 @@ screenshots. Proof and owned cleanup must both pass. Archive only this sanitized
 artifact directory; private configuration, certificates, keys, profiles and raw
 process logs are excluded. Existing artifacts must be moved aside before another
 run so stale evidence cannot pass. The
-[P7 delivery record](../../../docs/roadmap/phase-02d-walking-skeleton.md#p02d-7-step-3--browser-and-audit-proof-2026-10-11)
+[P7 delivery record](../../../docs/roadmap/phase-02d-delivery-log.md#p02d-7-step-3--browser-and-audit-proof-2026-10-11)
 owns local proof/review evidence; the packet's Step 4 record and
 [branch protection](../../../.github/CONTRIBUTING.md#branch-protection-settings-on-main)
 own real CI receipts and required-check activation. Local success alone does not
@@ -365,7 +384,7 @@ record and CONTRIBUTING; do not infer them from a local audit.
   applicable `jsx-a11y` rules and localized page-semantics checks, plus manual
   keyboard, focus, reflow, contrast and screen-reader evidence. Acceptance does
   not claim those controls pass; implementation records their actual results in
-  [Phase 02d](../../../docs/roadmap/phase-02d-walking-skeleton.md#p02d-6-accepted-answers).
+  [Phase 02d](../../../docs/roadmap/phase-02d-delivery-log.md#p02d-6-accepted-answers).
 
 ## Common pitfalls
 
@@ -386,6 +405,6 @@ record and CONTRIBUTING; do not infer them from a local audit.
   standard does not prove implementation. Accepted P02d-6/G43 requires earlier
   failing lint/semantics controls and actual manual assistive-technology evidence;
   DOM assertions cannot substitute for a screen reader. Delivery is recorded in
-  [Phase 02d](../../../docs/roadmap/phase-02d-walking-skeleton.md#p02d-6-accepted-answers).
+  [Phase 02d](../../../docs/roadmap/phase-02d-delivery-log.md#p02d-6-accepted-answers).
 - **CI-only failures.** Usually a race or timing assumption. Use `--blame-hang`
   + `--blame-crash` locally.