feat(settings): preserve drafts and connection recovery

docs/redesign/phase-7/p7-09/evidence/oauth-results.json

@@ -3,7 +3,7 @@
   "checkpoint": "P7-09",
   "slice": "Independent OAuth sender repair",
   "recordedUtc": "2026-10-17T08:26:39.793290+00:00",
-  "decision": "Bounded client repair CONDITIONAL GO; final staged hygiene PASS, normal publication pending",
+  "decision": "Bounded client repair CONDITIONAL GO; staged hygiene PASS, normally pushed and directly verified",
   "entry": {
     "path": "docs/redesign/phase-7/p7-09/evidence/entry.json",
     "bytes": 6161,
@@ -459,5 +459,34 @@
     "path": "docs/redesign/phase-7/p7-09/evidence/oauth-static-checks.json",
     "sha256": "2efe01046430d1b9522ec348b0dfb1462d16589dff137ef7068f4b5b6609017e",
     "checkedUtc": "2026-10-17T08:27:18.310998+00:00"
+  },
+  "publication": {
+    "command": [
+      "rtk",
+      "proxy",
+      "git",
+      "push",
+      "origin",
+      "HEAD:refs/heads/codex/ui-redesign-phase4"
+    ],
+    "startedUtc": "2026-10-17T08:27:46.777675+00:00",
+    "finishedUtc": "2026-10-17T08:27:48.414087+00:00",
+    "exitCode": 0,
+    "head": "dac29278db3c187349b97771ca2f383c9e6e0962",
+    "log": ".artifacts/phase7/p7-09/oauth-push-receipt.log",
+    "logSha256": "68af881724e54d7bfb8f98c4c3e8b7b53b7ac72ab0bfb4b269d65ba2e2e053d7",
+    "observedUtc": "2026-10-17T08:27:48.643285+00:00",
+    "originDevelopment": "dac29278db3c187349b97771ca2f383c9e6e0962",
+    "liveDevelopment": "dac29278db3c187349b97771ca2f383c9e6e0962",
+    "main": "27657f31131cd95d42f0e1290853ec9c9b3959a4",
+    "originMain": "27657f31131cd95d42f0e1290853ec9c9b3959a4",
+    "liveMain": "27657f31131cd95d42f0e1290853ec9c9b3959a4",
+    "pendingPaths": [],
+    "workingTreeClean": true,
+    "raw": {
+      "path": ".artifacts/phase7/p7-09/oauth-push-receipt.json",
+      "sha256": "d997d9128b720a690f456e5fe094a7af5bd59efce4b0415430c4b01804ffff68",
+      "bytes": 856
+    }
   }
 }

docs/redesign/phase-7/p7-09/evidence/preferences-static-checks.json

@@ -0,0 +1,104 @@
+{
+  "schemaVersion": 1,
+  "checkpoint": "p7-09",
+  "status": "PASS",
+  "checkedUtc": "2026-10-17T08:50:12.966801+00:00",
+  "commands": [
+    {
+      "name": "secret-scan",
+      "command": [
+        "rtk",
+        "proxy",
+        "C:\\Users\\Connor\\AppData\\Local\\Programs\\Python\\Python312\\python.exe",
+        "-X",
+        "utf8",
+        "scripts/supply-chain.py",
+        "scan-secrets"
+      ],
+      "startedUtc": "2026-10-17T08:50:09.548379+00:00",
+      "finishedUtc": "2026-10-17T08:50:12.129725+00:00",
+      "exitCode": 0,
+      "log": ".artifacts/phase7/current/static/20261017T085009Z/secret-scan.log",
+      "logSha256Raw": "c5a88d5ebdc042adba125c1eaacbe44f9f4a5c19898c0f195573c00d511aa28d"
+    },
+    {
+      "name": "working-whitespace",
+      "command": [
+        "rtk",
+        "proxy",
+        "git",
+        "diff",
+        "--check"
+      ],
+      "startedUtc": "2026-10-17T08:50:12.129725+00:00",
+      "finishedUtc": "2026-10-17T08:50:12.220613+00:00",
+      "exitCode": 0,
+      "log": ".artifacts/phase7/current/static/20261017T085009Z/working-whitespace.log",
+      "logSha256Raw": "d2993bc68ad9a63f711c8f5473155e2ba00fdcd461220cc3849185f2f9ad93e6"
+    },
+    {
+      "name": "staged-whitespace",
+      "command": [
+        "rtk",
+        "proxy",
+        "git",
+        "diff",
+        "--cached",
+        "--check"
+      ],
+      "startedUtc": "2026-10-17T08:50:12.220613+00:00",
+      "finishedUtc": "2026-10-17T08:50:12.315419+00:00",
+      "exitCode": 0,
+      "log": ".artifacts/phase7/current/static/20261017T085009Z/staged-whitespace.log",
+      "logSha256Raw": "d2993bc68ad9a63f711c8f5473155e2ba00fdcd461220cc3849185f2f9ad93e6"
+    },
+    {
+      "name": "phase7-whitespace",
+      "command": [
+        "rtk",
+        "proxy",
+        "git",
+        "diff",
+        "--check",
+        "b5319981ad3d1bd635daff861453d23c0de5320b"
+      ],
+      "startedUtc": "2026-10-17T08:50:12.315419+00:00",
+      "finishedUtc": "2026-10-17T08:50:12.477488+00:00",
+      "exitCode": 0,
+      "log": ".artifacts/phase7/current/static/20261017T085009Z/phase7-whitespace.log",
+      "logSha256Raw": "d2993bc68ad9a63f711c8f5473155e2ba00fdcd461220cc3849185f2f9ad93e6"
+    }
+  ],
+  "untrackedSecretScan": {
+    "files": 0,
+    "findings": 0
+  },
+  "documentation": {
+    "files": 26,
+    "relativeLinks": 593,
+    "errors": []
+  },
+  "preservation": {
+    "groups": 57,
+    "statuses": {
+      "PARTIAL": 56,
+      "PASS": 0,
+      "FAIL": 0,
+      "DEFERRED": 1
+    },
+    "originalRoutesPreserved": true,
+    "currentConcreteRoutes": 33
+  },
+  "production": {
+    "main": "27657f31131cd95d42f0e1290853ec9c9b3959a4",
+    "originMain": "27657f31131cd95d42f0e1290853ec9c9b3959a4",
+    "status": "NO-GO",
+    "qualification": "Local fetched refs; direct push observation recorded separately."
+  },
+  "hashPolicy": "Portable JSON UTF8 LF; raw log hashes measure exact saved bytes.",
+  "limits": [
+    "Pattern scanner skips binary and files over2MiB; not historical Git/production secrets.",
+    "Local links check target existence, not URL/heading anchors.",
+    "Static evidence is not runtime/manual/device/provider/production acceptance."
+  ]
+}