Update the final candidate status

ROADMAP.md

@@ -10,8 +10,9 @@ Activation admission limit, and bounded resource tests are complete for 0.1.0.
 Portable benchmark probes are also complete. The fail-closed local release
 gate and fuzz checks are also complete. The external restart proof and public
 document cleanup are complete. The exact tagged-module command is ready. The
-hosted supported-system run and the successful tagged-module proof remain
-open. Action recovery confirms Grain State before it commits an Application
+hosted supported-system run and the final same-commit candidate proof are
+complete. The successful tagged-module proof remains open. Action recovery
+confirms Grain State before it commits an Application
 receipt. Pending actions recover in save order. An Invalid Reminder now gets
 one Terminal Result. Direct lifecycle proof for a mutable State alias and a
 Reminder-turn State failure is complete. The exact `v0.0.5` SQLite migration
@@ -187,12 +188,14 @@ The implementation batches are:
    before it commits an Application receipt. A fourth follow-up gives an
    Invalid Reminder one Terminal Result. A fifth follow-up proves the direct
    State failure lifecycle. A sixth follow-up migrates the exact `v0.0.5`
-   schema and proves the external upgrade path. Hosted platform proof and the
-   successful tagged-module run are still open.
+   schema and proves the external upgrade path. The hosted platform run and
+   final same-commit candidate proof are complete. The successful
+   tagged-module run is still open.
 
 The exact scope and proof for each batch are in
 [design/release-0.1.0.md](design/release-0.1.0.md). Batches 1 through 7 and
-Batch 8a through 8d are complete. Batch 8e owns the final same-commit proof.
+Batch 8a through 8d are complete. Batch 8e candidate proof is complete; its
+exact tagged-module proof remains open.
 
 ## Cluster preview
 

design/release-0.1.0.md

@@ -473,7 +473,8 @@ Proof:
 
 #### Batch 8e: Final candidate proof
 
-**Status: Pending.**
+**Status: In progress.** The final `master` candidate commands and hosted
+platform jobs are complete. The exact tagged-module proof remains pending.
 
 Before the final proof, complete the release audit for the upgrade from
 `v0.0.5`. That version stores Reminder identity in the `entity_type` and
@@ -566,13 +567,13 @@ Batch 7 hardens generation and moves implementation code under `internal/`.
 Batch 8a adds Activation admission. Batch 8b adds bounded resource proof and
 portable benchmark probes. Batch 8c implements fail-closed local release
 checks, fixed tools, fuzz checks, and the hosted platform workflow. The hosted
-workflow has not run on this change. Batch 8d implements the external restart
-proof and public document cleanup. A release audit follow-up passes dynamic
-Reminder names to typed methods. A second follow-up prevents a caller-provided
-Make variable from replacing the internal test command. A third follow-up
-restores Grain State before it commits an Application receipt. An Invalid
-Reminder now gets one Terminal Result. A fifth release audit follow-up proves
-the mutable State alias and Reminder-turn State failure lifecycle. Batch 8e
-owns hosted proof, exact tagged module proof, and the final same-commit release
-proof. A sixth release audit follow-up migrates the exact `v0.0.5` Reminder
-schema and adds the external upgrade proof.
+workflow has passed on the final `master` candidate. Batch 8d implements the
+external restart proof and public document cleanup. A release audit follow-up
+passes dynamic Reminder names to typed methods. A second follow-up prevents a
+caller-provided Make variable from replacing the internal test command. A
+third follow-up restores Grain State before it commits an Application receipt.
+An Invalid Reminder now gets one Terminal Result. A fifth follow-up proves
+the mutable State alias and Reminder-turn State failure lifecycle. Batch 8e's
+candidate commands, hosted proof, and final same-commit proof are complete. It
+still owns the exact tagged-module proof. A sixth release audit follow-up
+migrates the exact `v0.0.5` Reminder schema and adds the external upgrade proof.

design/release.md

@@ -90,8 +90,9 @@ The 0.0.x release-note question has a zero-maintenance answer: none is written.
 The earlier functional readiness work is complete. It includes public API
 comments, Runtime shutdown, errors, lifecycle, the example, observability, and
 benchmarks. The 0.1.0 contract adds composition and release evidence gates.
-Public document cleanup is complete. Hosted jobs and the final tagged-module
-proof remain open. See [ROADMAP.md](../ROADMAP.md).
+Public document cleanup, hosted jobs, and the final same-commit candidate proof
+are complete. The final tagged-module proof remains open. See
+[ROADMAP.md](../ROADMAP.md).
 
 Cluster support remains a preview. A partition can misjudge healthy Silos.
 

docs/release-0.1.0.md

@@ -309,5 +309,5 @@ commits the Application receipt. The clean external-module restart proof
 passes locally on Linux. The exact `v0.0.5` migration and external upgrade
 proof also pass locally on Linux. An Invalid Reminder now gets one Terminal
 Result. Public document cleanup is complete. Hosted
-supported-system proof, the exact tagged-module run, and the final same-commit
-proof remain open. ROADMAP.md tracks the batches.
+supported-system proof and the final same-commit candidate proof are complete.
+The exact tagged-module run remains open. ROADMAP.md tracks the batches.