docs(roadmap): reconcile carryovers and verified increments

docs/direct-roadmap/BLOCKERS.md

@@ -5,7 +5,7 @@
 | ID | Feature / description and known cause | Severity / dependency | Required action | Elsewhere / gate scope / status |
 | --- | --- | --- | --- | --- |
 | B01 | P10 publication: Gitea pre-receive SIGSEGV rejected prior pushes | Mandatory checkpoint; external server fault | Normal push and exact readback | RESOLVED: remote `1692142295950e390a4cf807d9df86cc5cf96290`; no server repair performed |
-| B02 | P10-01 candidate approval absent; addendum explicitly retains this gate | Mandatory owner decision D01 | Approve/reject exact CLEAN-20 scope | Independent authorised planning allowed; blocks cleanup implementation; AWAITING_APPROVAL |
+| B02 | P10-01 candidate-specific approval | Mandatory owner decision D01 | Owner replied “Approve CLEAN-20 only” | RESOLVED for CLEAN-20, which was verified and published. Additional candidates remain separately gated |
 | B03 | Ordered roadmap implementation lacks accepted predecessor phases | Mandatory dependency | Complete/accept predecessors and stage-specific scopes | Explicitly independent planning allowed; blocks dependent development; BLOCKED |
 | B04 | Physical device/AT/contrast/native-language/actual print qualification missing | Release qualification | Human review with actual evidence | Unaffected planning can proceed; production and affected acceptance; NOT_TESTED |
 | B05 | Real CV-model compatibility/semantic quality unqualified; adapter withheld | High activation gate | Separately approve safe immutable model qualification; retain disabled state | Model-independent work allowed; AI activation/claims; BLOCKED |
@@ -18,4 +18,4 @@ Execution interruption: the three delegated workers hit a service usage limit. P
 
 Security entry: the master prompt's `DO NOT START THIS NOW!` and feature-completion dependency remain unresolved; conflicting README immediate-review wording does not authorise a formal scan. No new vulnerability findings or material risk acceptance are claimed.
 
-RR-11 adds a reproduced deployment-backup parser compatibility defect (proposed P2); RR-12/13 document unqualified rollback/restore/encryption boundaries. See FINDINGS.md and the release branch recovery report. These do not block independent research or authorise deployment changes. I18N's remaining 80 dynamic calls and broader census are unfinished eligible work, not external blockers.
+RR-11 was fixed and published with 31 offline tests. RR-12/13 retain the rollback, restore and encryption gaps. All 188 historical I18N dynamic-call reviews are accounted for. Full catalogue and native coverage are open. See [the current TODO](ROADMAP_TODO.md).

docs/direct-roadmap/LATEST_CHECKPOINT.md

@@ -1,5 +1,11 @@
 # Direct execution continuation
 
+## Roadmap TODO and audit search
+
+The [roadmap TODO](ROADMAP_TODO.md) is the consolidated checklist, including open historical carryovers. On `codex/a3-ui-10`, published `49e79875d9681efab0880d7e812bb0e536b7d30c` qualifies recent Audit Log metadata search over the existing 200-event response. Runtime `1a8a97a57894bde4029ca0d878df6d4a815424a4` passed 10 tests, lint, build with TypeScript and 36 responsive configurations with 72 scans/captures. The first phone no-match copy clipped, then passed after moving outside the wide table. Notes and old/new values are excluded from matching. No browser writes. Next eligible A3 work is structured Audit filtering and safe detail expansion, or compact Admin and Application actions.
+
+The release branch `codex/release-backup-parser` published `47c6834cee192a5f1f054ddcd500b4d45c48c985`, mapping 41 source route families and environment boundaries. This is Stage 1 discovery evidence. Candidate, runtime and recovery qualification remain open. Both branch refs were independently read back.
+
 ## 10 November continuation and owner addendum
 
 Owner authorised `E:/Storage/Projects/Active/temp docs/final/additional`. Read the full A3 refinement and EUROPE-READY-01 prompt, SHA-256 `5aaefea0e2fde342fd78917d0b9d9eb38c873d902095bdaa4389c9bb6d83397d`, and inspected the three supplied screenshots. The authoritative addition is mapped in `docs/ui-modernisation/REFINEMENT_AND_EUROPE.md` on the integration branch. The `0bb722672520f2fea79d42fe3412bb58de104945` coverage companion uses the same 59 I18N candidate codes and records separate geography, map, provider, locale and release dispositions. No country or extra locale qualified for release.

docs/direct-roadmap/NEXT_ACTIONS.md

@@ -3,7 +3,7 @@
 10 November 2026.
 
 1. Continue P10-05 qualification on the frozen cleanup branch. CLEAN-20 is published. Reconcile full local regression, source-bound evidence and the 57 preservation groups. Further removal requires its own proven candidate and approval.
-2. Continue approved A3-IM10 from published `2033aea3` on `codex/a3-ui-10`. Next eligible slices include compact admin/application actions and audit filtering and expansion. Use the route and discrepancy registers for remaining correspondence, Settings and import states. Prepare final Gate F once the visual, workflow and regression evidence is reviewable.
+2. Continue approved A3-IM10 from published `49e79875` on `codex/a3-ui-10`. Recent Audit metadata search is complete. Next eligible slices include compact admin/application actions, structured Audit filtering and safe expansion. Use the route and discrepancy registers for remaining correspondence, Settings and import states. Prepare final Gate F once the visual, workflow and regression evidence is reviewable.
 3. Continue independently eligible localisation on its isolated branch. The 188 historical dynamic calls are accounted for. Prioritise contextual display coverage and automated locale checks. Native and additional locale publication gates remain open.
 4. Continue launch audit inputs and prepare four desktop/mobile concept pairs from `98483b80`. Continue eligible offline security/recovery work on the existing branches. RR-11 is fixed and tested offline. Preserve launch design/claims decisions, integrated security scope, and approved recovery environment requirements.
 5. Keep Product Review findings provisional until Phase 10 acceptance. Reuse the published GJ-00 pack. GJ-01 awaits the accepted predecessors, implementation scope and provider rights.

docs/direct-roadmap/OWNER_DECISIONS.md

@@ -1,15 +1,14 @@
 # Owner decisions
 
-2 November 2026. The Continuous Progress Addendum explicitly says P10-01 remains blocked until precise approval. It supersedes the earlier handoff's interpretation of “continue” as permission. No signed approval or controller state is created here.
+10 November 2026. The [roadmap TODO](ROADMAP_TODO.md) tracks current work and protected decisions. This record is for direct execution in chat.
 
 ## D01 — P10-01 / CLEAN-20
 
-**AWAITING_APPROVAL.** Choose:
+**APPROVED AND EXECUTED.** The owner replied “Approve CLEAN-20 only”. The approval covered the 38-line unimported `job-tracker-ui/src/App.css` at blob `74b5e053450a48a6bdb4d71aad648e7af821975c`. Verification and publication are in [P10-01](../redesign/phase-10/P10-01.md). Another removal needs its own evidence and approval.
 
-- Approve removal of only `job-tracker-ui/src/App.css` (recommended), under the exact verification and rollback scope in [P10-00](../redesign/phase-10/P10-00.md).
-- Retain the file and request a revised/no-removal checkpoint disposition.
+## A3 implementation and final visual review
 
-The file is 38 lines of unimported original CRA styling, Git blob `74b5e053450a48a6bdb4d71aad648e7af821975c`. No callers, routes, persisted data or replacement are expected. Verify source identity, types/lint/build and the specified existing EN/NB/theme/browser cases; restore the exact file by reverting the implementation commit if verification fails. Accepted PDF evidence remains unchanged. Approval covers only CLEAN-20 plus necessary evidence/verification, not another removal or later initiative. Publication of the assessment is now verified; implementation approval is the remaining immediate gate.
+The owner selected A3, approved the implementation and approved progression through IM10. Final IM10 visual acceptance is pending a reviewable whole-application package. Read-only 2FA status and audit redaction are published. Factor recovery, private support access and live diagnostics each retain their separate decision.
 
 ## Later decisions — not requested prematurely
 

docs/direct-roadmap/ROADMAP_TODO.md

@@ -33,7 +33,8 @@ Updated 10 November 2026. This is the cross-phase work list. The source prompts,
 - [ ] **Career, CV, letter and documents**. Finish connected overview-to-document reuse and create/import-to-edit/preview/export evidence. Preserve revisions, null-as-inherit, canonical profile ownership, frozen packages, import review and RD21.
 - [ ] **Correspondence**. Improve inbox, mailbox state, relevant job context and review. Scope explicit consent, provider permissions, multi-mailbox storage and retention separately. Preserve conflict, attachment and confirmed-send flows.
 - [ ] **Admin Users**. Alignment and read-only 2FA shipped. Compact actions and creation/role/reset/deletion dialogue, error and keyboard coverage remain. **Gated** MFA recovery design approval and authorisation for factor changes.
-- [ ] **Audit and privacy**. Mail-subject redaction shipped. Add approved filters and safe record expansion, minimise exposed fields and verify isolation across remaining delivery paths. **Gated** private support access proposal, consent, expiry and revocation.
+- [x] **Audit recent search**. Search the existing admin response by user, type, application ID/title or company. The limit and no-match state are explicit. Published `49e79875` with 10 selected tests and 72 browser states.
+- [ ] **Audit and privacy**. Mail-subject redaction shipped. Add structured filters and safe record expansion, minimise exposed fields and verify isolation across remaining delivery paths. **Gated** private support access proposal, consent, expiry and revocation.
 - [ ] **System Status**. Last successful browser refresh shipped. Qualify actual worker/queue/task/provider/mail/enrichment/error/timing signals with honest stale/unavailable states. Design exists for isolated allowlisted diagnostics. **Gated** execution, audit and isolation approval. Retain CV benchmark evidence.
 - [ ] **Settings and automation**. Qualify individual rules and explanatory states, remaining recovery cases and per-user Ghosted pause contract. Keep model/provider execution and real mutations separately authorised.
 - [ ] **Bookmarklet and terminology**. Finish EN/NB terminology and display review. Retain bookmarklet until device parity for URL paste, extension and PWA sharing, then seek retirement approval.
@@ -108,7 +109,7 @@ Bounded offline fixes and root security policy exist. Formal integrated scope, t
 
 ## RELEASE-READINESS-01 · Qualification and production decision
 
-- [ ] **Stage 1** Close discovery, inventory, prior blockers and baseline scope. Backup parser RR-11 published with 31 offline tests. RR-12 rollback and RR-13 recovery remain open.
+- [ ] **Stage 1** Close discovery, prior blockers and baseline scope. Endpoint/environment census published at `47c6834c`. Backup parser RR-11 published with 31 offline tests. RR-12 rollback and RR-13 recovery remain open.
 - [ ] **Stage 2** Freeze exact candidate, environment, image/digest, migration/config/dependency identities, CI and evidence provenance.
 - [ ] **Stage 3 · Functional** Accounts/auth, jobs/tracking, dashboard, career/CV/documents, AI, correspondence, integrations, notifications, admin, billing and exports. Qualify real browser, sidecar and MariaDB lanes separately.
 - [ ] **Stage 3 · UX** Responsive/visual and keyboard/AT/accessibility, EN/NB and launched locales, reflow/contrast, physical devices and representative workflows.
@@ -122,8 +123,13 @@ Bounded offline fixes and root security policy exist. Formal integrated scope, t
 
 ## Separately gated or excluded
 
+- [ ] Optional P7-06F follow-mode composer: retain deferral pending action/fallback decision. P7-12 completed conditionally. Preserve its native/provider/release limits.
+- [ ] Carry forward Phase 8 dashboard and Phase 9 qualification gaps: real device/AT, performance, hosted runner isolation/lifecycle and provider/physical-print review. Reuse qualified Linux/Windows PDF fidelity and scoped RD21 evidence. Refresh Python/advisory evidence at the applicable security baseline.
+- [ ] Legacy Job/JobApplication data cutover and migration/startup ownership: verify compatibility, backup/restore and observation release before removal of duplicate columns or legacy bootstraps.
+- [ ] Stripe activation and account deletion: verify commercial configuration, portal/webhooks and supported operations. Obtain approval and rehearse retention, legal hold, deletion tombstones, provider cleanup and restore handling.
+- [ ] Operational debt: qualify proxy/client-IP/firewall and mail/AI durability. Gate multi-replica work on worker leasing and containment. Assess log aggregation, tag/attachment storage and checklist-read separation only when justified.
 - [ ] SQLite retirement: qualified MariaDB parity, migration, rollback, restore and retention before any removal.
 - [ ] Live model, provider, mail, market claims, native/device, hosted CI, staging and production decisions stay separate.
 - [ ] Deferred CV-import engine overhaul and personal portfolio are outside this execution.
 
-Source index: Phase 10 and Product Review prompts 5–6, Global Jobs prompt 7 and `docs/planning/global-jobs-prompts/`, complete `I18N/` and `jobjakt-security/` packs, homepage prompt 10, release readiness prompt 11, the approved A3 implementation/visual requirements and `additional/# Jobjakt — A3 refinement+EUJOBS.txt`. The [status register](ROADMAP_STATUS.md) and [latest checkpoint](LATEST_CHECKPOINT.md) identify current evidence and branches.
+Source index: Phase 10 and Product Review prompts 5–6, Global Jobs prompt 7 and `docs/planning/global-jobs-prompts/`, complete `I18N/` and `jobjakt-security/` packs, homepage prompt 10, release readiness prompt 11, the approved A3 implementation/visual requirements and `additional/# Jobjakt — A3 refinement+EUJOBS.txt`. Earlier items come from the [historical TODO](../roadmap/todo.md), [known issues](../roadmap/known-issues.md) and [technical debt](../roadmap/technical-debt.md). The [status register](ROADMAP_STATUS.md) and [latest checkpoint](LATEST_CHECKPOINT.md) identify current evidence and branches.

docs/roadmap/todo.md

@@ -1,10 +1,13 @@
+## Current roadmap
+
+Use the [cross-phase roadmap TODO](../direct-roadmap/ROADMAP_TODO.md) for outstanding scope and gates. The dated entries below preserve historical decisions and evidence.
+
 ## Direct Phase 10 — 2 November 2026
 
 - [x] P10-00: preserve/review the staged draft, verify baseline/evidence applicability and complete the [direct assessment](../redesign/phase-10/P10-00.md).
 - [x] Publication gate: normal push and exact remote readback succeeded at `1692142` after the earlier Gitea failure; no hook bypass or server repair. Further progress is tracked in [the direct-roadmap register](../direct-roadmap/ROADMAP_STATUS.md).
-- [ ] Owner gate: explicit approval of P10-01/CLEAN-20 only (`job-tracker-ui/src/App.css`), with the assessment's exact verification/rollback boundaries.
-- [ ] After approval only: implement and qualify that candidate; commit, publish and independently verify the checkpoint. Stop at subsequent candidate/entry gates.
-- [ ] P10-02–05 and later roadmap: preserve contracts and follow authoritative order from [continuity](../redesign/phase-10/HANDOFF.md). No later implementation is currently authorised.
+- [x] Owner approved P10-01/CLEAN-20 only (`job-tracker-ui/src/App.css`). The removal and its verification were published and independently verified.
+- [ ] Complete P10-04/05 acceptance and the subsequent workstreams under the scopes and gates in the current roadmap TODO.
 
 The autonomous backlog orchestrator remains paused and untouched. Earlier TODO entries retain their historical dates and decisions.