Session changelog 2026-07-21 (fourth session) -- tenant-onboarding review verdict recovered + pinned

One changelog per session (GA-R2/D1). Status lives ONLY in docs/CURRENT-STATE.md; this file is narrative + reverts. Predecessor (stage-3-close session, disconnected ~21:16): docs/changelog-20260721-netem-install-verify.md.

1. Disconnected-session recovery (read-only)

• Bootstrap reconciled clean: main at b2d4317, lint 0-fail, ledger scan matches the hand-seeded block (D=132, DOCFIX=198, BUNDLEFIX=052; 10 open SEC rows). No uncommitted traces from any disconnected session.
• The predecessor's final undelivered message (the 3-seat committee verdict on Chat's three tenant-onboarding-runbook inserts) was recovered VERBATIM from its local session transcript and re-presented to the operator. No repo edit and no commit had resulted from that review -- the verdict existed nowhere durable.

2. Tenant-onboarding review items PINNED to deployment close (operator-directed)

• Operator ruling this session: do NOT land the committee's recommended items now; pin all four for an end-of-deployment consideration review, because this deployment is changing posture and end goals and the items should be judged against the final shape.
• Delivered: a self-contained compact block in docs/session-ledger.md ("Deployment-close consideration review -- tenant-onboarding items"), carrying the corrected substance of all four items plus the standing caveat that every citation gets re-verified at review time (the full verdict text lives only in the predecessor's session transcript).
• Explicitly NOT done: no appendix-A entries, no contract edit, no dc-dc-phase6 edit, no numbering consumed (stated token-free in the ledger block per the standing counter discipline).
• Revert: git revert this commit (records only; no live surface or script was touched).