Replaces notes that stopped on 2026-08-13 and understated progress by roughly two
defects. Every row was re-measured against the tree rather than inherited: D1, D2,
D4 and D6 read as substantially implemented; D3 and D5 closed this pass.
Records the three things most likely to be lost or undone: that D2's alias defence
is strictness rather than normalization and breaks if someone normalizes the link
first; that D3 leaves two named residuals (the validation-to-exec window Node
cannot close, and launch-runtime.py re-resolving the binary for claude/pi); and
that the remaining D3 work is the measured child environment, not the executable
resolution already done.
Also records why the full suite needs the sanitized lease env, and the identity
blocker that keeps this commit-only regardless of when the hold lifts.
fred
d400ec5b9d