docs(qa): close local runtime acceptance and record publication blocker

dev/README.md

@@ -57,3 +57,9 @@ Raw activation/rollback identities, source-image compose override, build logs an
 Confirmed: both images healthy; served index matches the built bytes; backend health200; anonymous proxied account request401; actual backend environment has all seven authorised workers enabled and the240-second AI timeout. Ollama blobs were reverified after engine recovery. These checks establish the running source/configuration; model-quality and broader feature qualifications remain separately stated in B_ACCEPTANCE.md.
 
 For subsequent compose operations, retain the generated `source-images.override.json` **after** `dev/local-workers.override.yml`, the primary standalone development compose file and its `.env.dev`. Supply the same read-only `JOBTRACKER_DEV_BART_ARTIFACT` path. Running only the primary compose file can revert these local image/configuration selections. Do not substitute production configuration.
+
+### Cumulative A–D local activation — 2026-10-29
+
+The latest local source is `caa0c6a2efea5a6e9d8910f55fb00fd982cd48fd`, including the dashboard/admin monitor and the strategy JSON correction. Use the newer override `.artifacts/pre-phase10-ux/local-ai/source-caa0c6a/source-images.override.json` last; the B override above is historical. Backend image `sha256:14adb1e05757575e7c9d50c8f504f8209ebbf7f9b5f870daef0113d9dfe7dd49`, unchanged `/api` frontend `sha256:fd4092aa2919463f8cf55b81941df1cd4c2db261ed6dc092b8aaf74730d9d618`, sidecar `sha256:e1dc2dfce83caa4fe785ee9485b86011bb3ec0470511a9dfbdb03206ee1c40b3`. All were healthy after guarded recreation of only the backend/sidecar; the previous images remain available for rollback. No dependencies, model blobs, production services or MariaDB volumes were replaced.
+
+The sidecar smoke helper's immutable image guard now names this qualified source image. Full backend tests pass 1,448; offline Python contracts pass 83. Actual local extraction, model and scheduled enrichment observations, synthetic-account erasure and their evidence limits are in [LOCAL_RUNTIME_ACCEPTANCE.md](../docs/pre-phase10-ux/LOCAL_RUNTIME_ACCEPTANCE.md). Canonical local URL remains **http://jobbjakt.local**. Account AI consent and plan requirements still apply; scheduled enrichment runs every ten minutes. External services requiring provider credentials remain independently unqualified.

dev/check_local_ai.py

@@ -38,7 +38,7 @@ print(json.dumps({"status": "PASS", "model": os.environ["OLLAMA_MODEL"], "routin
 '''
     identity = json.loads(subprocess.check_output(["rtk", "proxy", "docker", "inspect", "jobjakt-dev-ai-service-1"], text=True))[0]
     assert identity["Config"]["Labels"]["com.docker.compose.project"] == "jobjakt-dev"
-    assert identity["Image"] == "sha256:8a29cb90fcc2817b0d784826d55a172c943f5ad7e1b6105e690a2d79ee15fe87"
+    assert identity["Image"] == "sha256:e1dc2dfce83caa4fe785ee9485b86011bb3ec0470511a9dfbdb03206ee1c40b3"
     result = subprocess.run(["rtk", "proxy", "docker", "exec", "-i", "jobjakt-dev-ai-service-1", "python", "-"],
                             input=program, text=True, capture_output=True, timeout=500)
     if result.returncode: