savegame 2026-08-08: dc0 .7 tailscale FIXED (advertise-only) + 10.13 re-IP PIVOT + dc0 checkpoint plan ...

GA-R4 bookend + sweep for the session that fixed the dc0 .7 tailscale install
(advertise-only, --authkey=file:, check guards -- committed 02e0b12/faef662) and
surfaced the 10.12->10.13 re-IP pivot.

- CURRENT-STATE: 2026-08-08 pivot callout -- 10.12 collides with the live IPv4
  cloud; drive dc0 to full deployment as a CHECKPOINT, then teardown+redeploy on
  10.13; the re-IP is a D-115 supersession + D-101 termination, NOT YET RULED.
- Sweep docs/audit/queued-findings-20260808-...reip-pivot.txt (F1-F16): the pivot,
  the D-115 conflict, MAAS profiles missing on the racks (fix existing+rebuild),
  no service migration (DC0>MAAS-regional>MAAS-rack), dc0 live inventory,
  checkpoint scope, + instrument-currency #22 (F3 wrong-store retraction; pkill
  self-match).
- 10.13 NetBox subnetting DRAFT (Task #2; octet-preserving proposal, not ruled).
- changelog-20260807 F3 retraction/correction; bounded ledger close summary.

Gauntlet ALL GREEN (102); repo-lint 0 fail. Tasks #1-#4 pinned.
Status ONLY in CURRENT-STATE.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Fg98z7QyzwYUs8fsWCn728