docs(roadmap): record export lifetime and retention qualifications

docs/direct-roadmap/FINDINGS.md

@@ -45,3 +45,5 @@ Correspondence recovery source c751b427 resolves reproduced stale reads, duplica
 Pasted-email source5f61d8f7 resolves reproduced pending duplicate/dismissal, stale completion, committed-refresh feedback and missing accessible-label findings.33 overlapping cases and eight pasted fixture journeys/40 scans passed; published72be6144. No server idempotency or real mailbox claim.
 
 V44 correspondence enclosure/empty strip resolved inc6375876; source/evidence published through214eb25f.33 affected cases,12 note configurations/60 scans and a separate pasted canary passed. Wider route/native/final review remains open.
+
+Resolved: delayed job export/CSV conversion downloaded or announced after session/panel boundaries (2a02e102). Release masked retention failures resolved separately (e1c8e845). New UI count finding: one converted row uses plural wording in EN/NB; preserve conversion behaviour while fixing copy.

docs/direct-roadmap/LATEST_CHECKPOINT.md

@@ -1,6 +1,14 @@
 # Direct execution continuation
 
-Current published A3 ref:214eb25fa557841d280b84b41e7f1e028511be7a; application source c6375876. Correspondence recovery, pasted-email recording and open surfaces are qualified within their recorded fixture scopes. Next: remaining Settings/import recovery and connected workflows. No immediate new owner decision is required for that independent work; protected gates remain pending.
+Current published A3 ref:50e16ff2e1ce29e5956e7609768730baf5c28cce; source2a02e102. Release branch:e1c8e84502e08144a32f496af8b03cb26f0ec815. Export/session and mocked retention failures qualified. Next: singular conversion copy, Rules density/recovery and remaining connected workflows. Existing protected gates unchanged.
+
+## 11 November export lifetime and retention failure propagation
+
+- A3 published/ref-readback50e16ff2e1ce29e5956e7609768730baf5c28cce; source2a02e102. Existing import session guard now also protects JSON/CSV export and local CSV conversion across unmount, changed context and invalidation, with current-language delayed feedback.35 cases/four suites, build/TypeScript and lint passed (14 new,21 existing).
+- Twelve actual UI configurations at390/768/1440 ×EN/NB ×light/dark passed36 native downloads,12 scans and two bounded SPA-unmount probes each. CSV BOM/CRLF/Unicode and JSON bytes matched fixtures; conversion retained Unicode. No API writes/unavailable reads/page exceptions.150 committed source/evidence/export bindings and36 raw/gzip receipts verified. Report A3 docs/ui-modernisation/JOB_EXPORT_LIFETIME.md. Native probes use250ms quiet windows; deterministic unit promises carry complementary lifetime evidence. No real private export or provider/session/security acceptance claimed.
+- Release published/ref-readbacke1c8e84502e08144a32f496af8b03cb26f0ec815, baseline3cca4418, on codex/release-rollback-health. Worker reproduced daily-prune/monthly-enumeration/sort/monthly-prune failures being masked under conditional Bash invocation. Explicit guards now stop upload/deploy continuation. Backup16/16, rollback6/6, syntax/diff passed; root reviewed exact diff, matched remote and verified three tested raw source identities/check receipts. Tests extract functions and mock pruning/upload; no real deletion, deploy or recovery. A failed real prune may already have removed eligible old files. Actual RR09/12/13 and release gates remain open. Release changes remain on their separate development branch.
+- New visible-text follow-up: conversion screenshot says one rows /1 rader. Fix singular count wording without changing conversion schema, then continue Rules density/recovery and other eligible IM10 workflows. Protected Phase10 D02/A3/homepage/provider/security/recovery/release gates unchanged.
+
 
 ## 11 November correspondence visual checkpoint
 

docs/direct-roadmap/NEXT_ACTIONS.md

@@ -3,7 +3,7 @@
 11 November 2026.
 
 1. Phase 10 candidate qualification and independent final-proposal review are complete. Owner decision D02 covers the concrete Conditional GO package published at `59fd674f`, retaining inherited qualifications. Keep it queued while independent work continues. Further removal requires its own proven candidate and approval.
-2. Continue approved A3-IM10 from published214eb25f on codex/a3-ui-10. Correspondence read/manual-note recovery is qualified; pasted-email recording is also qualified. Decorative correspondence surfaces are also qualified in12 configurations. Next address remaining Settings/import/route and connected-workflow states, and review unqualified Gmail completion paths with offline fixtures. Reuse current source-bound evidence, retain the 34 routes/57 groups and final Gate F. Do not repeat accepted native discovery cases solely to resume.
+2. Continue approved A3-IM10 from published50e16ff2 on codex/a3-ui-10. Correspondence read/manual-note recovery is qualified; pasted-email recording is also qualified. Decorative correspondence surfaces are also qualified in12 configurations. Next address remaining Settings/import/route and connected-workflow states, and review unqualified Gmail completion paths with offline fixtures. Reuse current source-bound evidence, retain the 34 routes/57 groups and final Gate F. Do not repeat accepted native discovery cases solely to resume.
 3. Continue independently eligible localisation on its isolated branch. The 188 historical dynamic calls are accounted for. Prioritise contextual display coverage and automated locale checks. Native and additional locale publication gates remain open.
 4. Four desktop/mobile launch concept pairs are published at `ccb11494`. Retain owner selection before refinement and final approval before implementation. Release `3cca4418` includes RR-11/13 fixes and RR-12 post-rollback probes, with six offline rollback/twelve backup tests and corrected legacy-runbook scope. Actual recovery, integrated security and production remain separately gated.
 5. Keep Product Review findings provisional until Phase 10 acceptance. Reuse the published GJ-00 pack. GJ-01 awaits the accepted predecessors, implementation scope and provider rights.
@@ -12,3 +12,5 @@
 Use [the complete roadmap TODO](ROADMAP_TODO.md), [the latest checkpoint](LATEST_CHECKPOINT.md) and branch-specific handoffs to resume. The orchestrator remains paused. Keep pre-p10-ux and unrelated work intact. Publication belongs on the relevant development branch.
 
 Edit Job V39 is qualified/published at c172427f; do not repeat its nine paired journeys. Shared MUI defaults are now qualified at 5a92ae3b; null Applied-date preservation at e6240ad3. Continue remaining route/state walkthroughs and eligible localisation checks. Retain Phase 10 D02 and final A3 gates.
+
+Export/session lifetime is qualified; fix the observed singular conversion message and continue Rules density/recovery. Release e1c8e845 is published separately; do not repeat unchanged external recovery attempts or claim real pruning/restore.

docs/direct-roadmap/ROADMAP_STATUS.md

@@ -11,7 +11,7 @@ Updated 11 November 2026. This register records direct-chat work. See [the conti
 | P10-04 candidate functional/data verification | QUALIFIED WITH INHERITED LIMITS | Candidate checks and full local 1,448 backend/1,031 frontend receipts reconciled. Applicable historical source/environment evidence retained. Existing operational and human gates carry forward |
 | P10-05 full acceptance | READY FOR OWNER REVIEW | Reviewed Conditional GO proposal, all57 preservation dispositions and Product Review handoff published at `59fd674f`. D02 final milestone decision pending. See [proposal](../redesign/phase-10/ACCEPTANCE_PROPOSAL.md) |
 | PRODUCT-REVIEW-01 | FINAL REVIEW BLOCKED | Final audit requires accepted Phase 10. Approved A3 work advances separately under the owner's direct authorisation |
-| A3 UI/UX modernisation | IM10 IN PROGRESS | Published through214eb25f, sourcec6375876. V42–V44 correspondence corrections:33 overlapping cases,12 note configurations/60 scans plus separate pasted canary; build/lint passed. Eight-configuration pasted matrix remains bound to5f61d8f7. Other routes/workflows, native/human and final Gate F remain open |
+| A3 UI/UX modernisation | IM10 IN PROGRESS | Published through50e16ff2, source2a02e102. Export lifetime:35 overlapping cases,12 configurations/36 native downloads/12 scans, build/lint passed. Prior correspondence/source-bound matrices retained. Rules/import/connected workflows, native/human and final Gate F remain open |
 | INT-GLOBAL-JOBS-01 / GJ-00 | CONDITIONAL | Existing planning at `0ec9f98e6ed4a646fc5e017d8eb6fade07653f37`; exact remote reverified 2 November. No implementation authorised |
 | INT-GLOBAL-JOBS-01 implementation | BLOCKED | Accepted Phase 10/Product Review, initiative approval and provider rights |
 | I18N-01 / I18N-00 audit | PARTIAL | All 188 historical dynamic call reviews accounted for in published `4172c23d`. Full visible-text, native, market and European coverage remain open |
@@ -20,7 +20,7 @@ Updated 11 November 2026. This register records direct-chat work. See [the conti
 | LAUNCH-01 four desktop/mobile concepts | PUBLISHED FOR REVIEW | Gallery and eight rendered screenshots at `ccb11494`. 20 controlled browser checks passed |
 | LAUNCH-SITE final design/implementation | AWAITING_APPROVAL | Owner selection or combination is next. Refine and obtain final design approval before application implementation |
 | SECURITY-AUDIT-01 | OFFLINE PREFLIGHT PARTIAL | Approved root policy published at `de3d5031`. Formal integrated scan requires a completed application baseline and applicable environment/cost approval |
-| RELEASE-READINESS-01 / discovery and RR-11–14 | PARTIAL | Parser, off-host copy/monthly guards, rollback health probes and legacy guidance published through release branch `3cca4418`. Six offline rollback and twelve backup tests passed. Actual rollback, restore and off-host encryption evidence remain open |
+| RELEASE-READINESS-01 / discovery and RR-11–14 | PARTIAL | Release branche1c8e845 explicitly propagates prune/enumeration failures.16 backup and6 rollback offline methods plus syntax passed; root verified diff/ref/source receipts. Earlier parser/guards/probes retained. Real rollback/restore/off-host/release qualification remain open |
 | Release stages 2–7 baseline, qualification, remediation, requalification, rehearsal, final acceptance | BLOCKED | Final release candidate/prerequisites not accepted; each stage needs actual applicable environment and source-bound evidence |
 | PERF-01 / 18 performance areas | IN PROGRESS | A3 page query, Companies cache, rules freshness and locale request changes published through `1d733675`. JobTable split trial remains isolated after a throttled phone regression. MariaDB plan/load validation blocked by unavailable local Docker engine |
 

docs/direct-roadmap/ROADMAP_TODO.md

@@ -38,7 +38,7 @@ Updated 11 November 2026. This is the cross-phase work list. The source prompts,
 - [x] **Recent Audit filters and details**. Exact event type and inclusive local dates combine with recent search. Keyboard disclosure uses already permitted values. Published `fd524a4b` with 11 tests and 108 controlled browser states.
 - [ ] **Audit and privacy**. Mail-subject redaction shipped. Historical search, additional supported filters, safe event history and isolation across remaining delivery paths remain open. **Gated** private support access proposal, consent, expiry and revocation.
 - [ ] **System Status**. Last successful browser refresh shipped. Qualify actual worker/queue/task/provider/mail/enrichment/error/timing signals with honest stale/unavailable states. Design exists for isolated allowlisted diagnostics. **Gated** execution, audit and isolation approval. Retain CV benchmark evidence.
-- [ ] **Settings and automation**. Qualify individual rules and explanatory states, remaining recovery cases and per-user Ghosted pause contract. Keep model/provider execution and real mutations separately authorised.
+- [ ] **Settings and automation**. Export/CSV session lifetime qualified at50e16ff2 (35 tests/36 native downloads); singular conversion copy and Rules density/recovery remain eligible. Qualify individual rules and explanatory states, remaining recovery cases and per-user Ghosted pause contract. Keep model/provider execution and real mutations separately authorised.
 - [ ] **Bookmarklet and terminology**. Finish EN/NB terminology and display review. Retain bookmarklet until device parity for URL paste, extension and PWA sharing, then seek retirement approval.
 - [ ] Test full journeys: discovery→detail→save/track, CV create/import→edit→preview→export, application→status→follow-up, Career Profile→document reuse. Use [route evidence and discrepancies on the A3 branch](LATEST_CHECKPOINT.md).
 
@@ -111,7 +111,7 @@ Bounded offline fixes and root security policy exist. Formal integrated scope, t
 
 ## RELEASE-READINESS-01 · Qualification and production decision
 
-- [ ] **Stage 1** Close discovery, prior blockers and baseline scope. Census/parser, RR-13 transfer/monthly guards and RR-12 rollback health checks are published through release `55431b5a`. Six offline rollback and twelve backup tests passed. Runtime rollback and recovery remain open.
+- [ ] **Stage 1** Close discovery, prior blockers and baseline scope. Census/parser, RR-13 transfer/monthly guards and RR-12 rollback health checks are published through release `55431b5a`. Six offline rollback and twelve backup tests passed. Release e1c8e845 also closes masked retention-command failures, with16 backup/6 rollback offline methods. Runtime rollback and recovery remain open.
 - [ ] **Stage 2** Freeze exact candidate, environment, image/digest, migration/config/dependency identities, CI and evidence provenance.
 - [ ] **Stage 3 · Functional** Accounts/auth, jobs/tracking, dashboard, career/CV/documents, AI, correspondence, integrations, notifications, admin, billing and exports. Qualify real browser, sidecar and MariaDB lanes separately.
 - [ ] **Stage 3 · UX** Responsive/visual and keyboard/AT/accessibility, EN/NB and launched locales, reflow/contrast, physical devices and representative workflows.