docs: close the adapter remediation ledger with final evidence

Record the focused subsystem suites, repository gates and the exact status of
every gate that is not green, with attribution rather than assumption:

- ci-artifact-contract remains at its baseline 19 sandbox failures and is never
  claimed as green
- WebKit browser capabilities are UNVERIFIED because the engine cannot launch
  here; chromium passes
- the two runtime-removal fixtures fail on pre-existing reduced-fixture
  arithmetic in scripts/contracts/ci-gates.ts, which is unchanged since the
  baseline revision
- provider and staging rollback matrices are UNVERIFIED, not PASS

Also record what was deliberately not performed: the Task 17 extraction refactor
and the multi-release V2 wire rollouts, together with the in-repo prerequisites
that did land for each.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

docs/operations/adapter-remediation-ledger.md

@@ -157,6 +157,57 @@ Rollout state starts at `NOT_STARTED`; documented-unimplemented items start at
 | WP-06 | Web Push `NOT_SELECTED` | `corepack pnpm exec vitest run tests/unit/web-push-worker-runtime.test.ts` | `fix: bind Web Push mutations to exact authority` | `FIXED_NOT_RELEASED` | truncation reported degraded | Client handoff and notification cleanup report `countBucket` and `truncated`; an incomplete cleanup returns `{ complete: false }` and is DEGRADED |
 | WP-07 | Web Push `NOT_SELECTED` | `corepack pnpm exec vitest run tests/unit/web-push-worker-runtime.test.ts` | `fix: bind Web Push mutations to exact authority` | `FIXED_NOT_RELEASED` | late native effect certainty | Native notification effect is tracked as NOT_APPLIED → MAYBE_APPLIED → CONFIRMED and observed as evidence only |
 
+## Final evidence (plan Task 18)
+
+Captured after every correctness task landed.
+
+### Focused subsystem suites (fresh processes)
+
+| Suite | Exit | Result |
+| --- | ---: | --- |
+| `tests/unit/browser-rpc` + `tests/unit/realtime` | 0 | 192 passed |
+| OPFS, IndexedDB, public cache, download | 0 | 80 passed |
+| abortable-operation, presigned, resumable, image CDN | 0 | 104 passed |
+| Service Worker + Web Push | 0 | 66 passed |
+
+### Repository gates
+
+| Command | Exit | Result |
+| --- | ---: | --- |
+| `corepack pnpm check:types` | 0 | all six projects pass |
+| `corepack pnpm lint` | 0 | `--max-warnings=0` clean |
+| `corepack pnpm check:architecture` | 0 | 288 modules, 865 dependencies; 12 fixtures PASS; allowed PASS / 9 forbidden rejected |
+| `corepack pnpm check:diagnostics` | 0 | 8 diagnostics and 5 telemetry producers PASS |
+| `corepack pnpm check:browser-file-storage-boundaries` | 0 | PASS, 34 rejections |
+| `corepack pnpm check:realtime-boundaries` | 0 | PASS |
+| `git diff --check` | 0 | clean |
+| `corepack pnpm test:component` | 0 | 126 passed |
+| `corepack pnpm test:integration` | 0 | 52 passed |
+| `corepack pnpm test:reference-feature` | 0 | 26 passed |
+| `corepack pnpm test:recipes` | 0 | 17 passed |
+| `corepack pnpm test:unit` | 1 | 112 passed / 1 failed files; 1559 passed / 19 failed tests |
+
+`test:all` stops at `test:unit`, so the later suites above were run directly.
+
+### Failures that are NOT claimed as green
+
+| Gate | Status | Attribution |
+| --- | --- | --- |
+| `tests/unit/ci-artifact-contract.test.ts` | 19 failed | Identical to the baseline capture. Sandbox child-process, cgroup and `/tmp` permission behavior; unrelated to adapters. Count did not change across any task. |
+| `corepack pnpm test:browser-capabilities` (webkit) | 6 failed / 24 passed | WebKit cannot launch: missing `libevent-2.1-7t64` and `libavif16`. Chromium passes. **UNVERIFIED**, not PASS. |
+| `corepack pnpm test:browser-file-storage-removal` | exit 1 | The reduced-removal-fixture prunes the CI contract to 77/89/102 while `scripts/contracts/ci-gates.ts:481` demands exactly 81/93/105. That file, the CI contract and `scripts/lib/removal-fixture.ts` are **unchanged since the baseline revision** (`git diff --name-only 4dc033c..HEAD` outside `src/`, `tests/` and `docs/` lists only the two Service Worker build scripts), so this is pre-existing, not a regression from this work. |
+| `corepack pnpm test:realtime-removal` | exit 1 | Same pre-existing reduced-fixture arithmetic. |
+| Server/provider compatibility matrices (presigned V1, Web Push V1/V2, Service Worker V1/V2, OPFS V1/V2) | not run | No provider or multi-release infrastructure in this environment. **UNVERIFIED**. |
+| Staging rollback drill | not run | Requires a staging deployment. **UNVERIFIED**. |
+
+### Work deliberately not performed
+
+| Plan task | Status | Reason |
+| --- | --- | --- |
+| Task 17 extraction (`BT-UP-05`, `BT-UP-06`, `BT-IMG-03`, OPFS/cache/download decomposition) | **NOT PERFORMED** | Behaviour-preserving refactor with no finding closure. The plan sequences it after all behaviour is green, and it requires facade characterization snapshots first. Nothing about it is blocked; it is simply not done. |
+| `SW-10`, OPFS physical/protocol V2 rollout, presigned and Web Push receipt V2 (`WP-02`, `WP-03`, `WP-04`) | **DEFERRED_TO_MIGRATION** | These are expand → dual-read/emit → old-writer drain → contract deployments requiring server request-shape negotiation and multi-release drain windows. The prerequisite in-repo pieces landed: the shared Service Worker manifest codec and canonical digest (`SW-05`), the OPFS worker protocol version and strict correlation (`STO-07`), and the OPFS physical generation token (`STO-01`). |
+| Promotion gaps `GAP-01`, `GAP-02`, `GAP-03`, `R-07`, `BT-UP-07`, `BT-IMG-04` | `PROMOTION_BLOCKED` | Unchanged by design. No availability state was raised and no optional capability was added to the default bootstrap. |
+
 ## Rules for updating this ledger
 
 - A row moves out of `NOT_STARTED` only with a linked red test, its green run, and the commit id.