caveman: disable on live host + SEC-017 + fail-closed compress guardrails ...

Council-reviewed follow-through on the caveman plugin (operator accepted the
recommendations). Three gated deliverables:

1. DISABLED on the live host: enabledPlugins."caveman@caveman"=false at user
   (~/.claude, uncommitted) + committed repo scope; env CAVEMAN_DEFAULT_MODE=off
   retained; marketplace kept for deliberate re-enable. Stops the per-turn
   third-party hook execution (which ran regardless of mode=off) at next
   session start.
2. SEC-017 opened (docs/security-ledger.md): supply-chain re-verify obligation
   pinning SHA 0d95a81 + self-remeasured baseline hashes; register = OPS (no
   D-number per GA-R3; precedent D-129). Open SEC 12->13, reconciled at Stage 4
   close (not an L10 trigger; CURRENT-STATE untouched).
3. Guardrails: repo-lint L11 FAILs on any *.original.md (caveman-compress
   residue), opt-out marker + harness T42-T44 (45/45 PASS); .claude/settings.json
   deny on Bash(*python3 -m scripts*)+Bash(*caveman-compress*); CLAUDE.md
   "Tooling guardrails" prohibiting the compressor against any repo-tracked
   prose. Rejected the proposed plugin-hash-baseline-in-repo-lint (layering
   violation; drift belongs in the SEC-017 re-verify duty).

Harness-config + governance only; no cloud mutation. repo-lint 0 fail;
gauntlet ALL GREEN (77). Changelog: docs/changelog-20260724-caveman-disable.md.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VUjEb7onHpdqFHUnio6iVw

GA-F10/H1 + GA-R1/R6: token migration, State-line demotions, E1 type tags (2.5+2.6) ...

Mapping record: docs/audit/h1-token-map-20260719.md -- all distinct
tokens dispositioned, none unmapped. Live-surface migration: workflow
doc (26 flags -> 0; header drops the tracker model, 8 State lines demote
to identity + CURRENT-STATE pointers), runbooks (18 -> 0; close-out
instructions RETARGETED to record status in CURRENT-STATE, not the
workflow tracker), readiness doc (5 -> 0), CURRENT-STATE itself (6 -> 0:
G9 STOPPED -> BLOCKED with named blocker; stale "GA-R1 NOT yet ratified"
header + pre-D-130 divergence rows corrected per C2). Gate rows gain
GA-R6/E1 type tags ([V]/[R]) with legend. CLAUDE.md expectation line
demoted per S5b. History classes (ledger, changelogs, design-decisions)
deliberately untouched -- their disposition is Batch 4/GA-R3 structural.
Extractor re-run: zero flagged occurrences on live non-history surfaces.
Batch 2 items 2.5 + 2.6.

Revert: git revert this commit.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VZbUeRE8weySLSGY1odrCi

GA-F05: jumphost name corrected to vcloud on always-loaded surfaces ...

CLAUDE.md:4 + SKILL.md:46 per the finding, plus a fourth surface
discovered in the same sweep: references/environment.md:43 (same defect
class, same measured fact -- hostname -> vcloud, env snapshot). The
memory-file instance is Batch 3's item per the plan. Batch 2 item 2.4.

Revert: git revert this commit.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VZbUeRE8weySLSGY1odrCi

Claude code patch