docs(entry): close visual preparation and reconcile mandatory orchestrator gates

docs/automation/handoffs/pre-phase10/BLOCKERS.json

@@ -5,7 +5,7 @@
   "items": [
     {
       "id": "P10-ENTRY-01",
-      "description": "No protected owner approval of the final published development baseline and exact cleanup scope was supplied to this handoff.",
+      "description": "Owner has approved current UI/PDF appearance and requested progress toward Phase10. Protected controller signature for the exact final published baseline and bounded P10-00 scope remains pending.",
       "evidence": [
         "AUTHORITY.md",
         "docs/cv-integration-qa/PHASE_10_HANDOFF.md"
@@ -30,7 +30,7 @@
       ],
       "severity": "HIGH",
       "acceptanceCriterion": "Unused-route proof; passing affected tests; satisfied functionality inventory",
-      "requiredAction": "Prepare and approve a concrete candidate with caller/route/inventory/rollback proof and affected native regression; retain every active compatibility path.",
+      "requiredAction": "Assessment-only P10-00 may establish eligibility after protected activation; no deletion proof is required to inspect an inventory. Require exact static/dynamic/route/old-data proof, rollback and affected tests plus protected scope approval before P10-01 or any removal.",
       "blockingPhase": [
         "PHASE-10: each removal candidate"
       ],
@@ -41,16 +41,18 @@
     },
     {
       "id": "AUTO-RUNTIME-01",
-      "description": "Current single-user controller reports real MXC canary PASS, but no actual owner key or ChatGPT sign-in, operator-controlled policy and disabled real execution; current-context qualification/activation remains incomplete.",
+      "description": "Read-only current public observation confirms configured owner key, matching public certificate pin, auth file present and fresh real-key/canary PASS with matching binding. Policy remains operator-controlled and queue disabled; auth session validity not independently tested.",
       "evidence": [
         "CONTROLLER_ADDENDUM.md",
         "READY_TO_RUN.md",
         "controller-current-native-qualification-json",
-        "controller-current-setup-results-json"
+        "controller-current-setup-results-json",
+        "final-entry-controller-status",
+        "FINAL_DEVELOPMENT_ENTRY.md"
       ],
       "severity": "HIGH",
       "acceptanceCriterion": "Independent qualified execution boundary",
-      "requiredAction": "Operator must sign into dedicated auth-only profile, configure the actual protected owner key and qualify its host-positive/worker-negative boundary and fresh current-context controls, then independently approve runtime/queue/entry policy. Existing same-user MXC mode does not require a new account or VM; its finite canaries do not qualify actual owner credentials or roadmap execution. This handoff must not operate that runtime.",
+      "requiredAction": "Owner checks auth-status, refreshes qualification only if expired/changed (current observation expires30October17:33UTC), and deliberately enables qualified runtime plus exact protected entry/policy approvals after adapter/scope qualification. No key recreation or extra account/VM indicated.",
       "blockingPhase": [
         "AUTOMATIC_PHASE-10_EXECUTION"
       ],
@@ -104,9 +106,11 @@
     },
     {
       "id": "HUMAN-01",
-      "description": "Physical device, keyboard/AT/contrast, human EN/Bokmål, typography and actual printing acceptance are not provided.",
+      "description": "Owner personally approved current UI/CV/PDF visual presentation for development. Physical printing, physical-device/AT/contrast and proficient language/workflow tests retain actual unfinished status; aggregate human acceptance is not passed.",
       "evidence": [
-        "MANUAL_ACCEPTANCE.md"
+        "MANUAL_ACCEPTANCE.md",
+        "PDF_VISUAL_APPROVAL.json",
+        "FINAL_DEVELOPMENT_ENTRY.md"
       ],
       "severity": "MODERATE",
       "acceptanceCriterion": "Genuine human/device/language/print acceptance",