# Session changelog 2026-07-21 (fourth session) -- tenant-onboarding review verdict recovered + pinned

One changelog per session (GA-R2/D1). Status lives ONLY in
docs/CURRENT-STATE.md; this file is narrative + reverts. Predecessor
(stage-3-close session, disconnected ~21:16):
docs/changelog-20260721-netem-install-verify.md.

## 1. Disconnected-session recovery (read-only)

- Bootstrap reconciled clean: main at b2d4317, lint 0-fail, ledger scan
  matches the hand-seeded block (D=132, DOCFIX=198, BUNDLEFIX=052; 10 open
  SEC rows). No uncommitted traces from any disconnected session.
- The predecessor's final undelivered message (the 3-seat committee verdict
  on Chat's three tenant-onboarding-runbook inserts) was recovered VERBATIM
  from its local session transcript and re-presented to the operator. No
  repo edit and no commit had resulted from that review -- the verdict
  existed nowhere durable.

## 2. Tenant-onboarding review items PINNED to deployment close (operator-directed)

- Operator ruling this session: do NOT land the committee's recommended
  items now; pin all four for an end-of-deployment consideration review,
  because this deployment is changing posture and end goals and the items
  should be judged against the final shape.
- Delivered: a self-contained compact block in docs/session-ledger.md
  ("Deployment-close consideration review -- tenant-onboarding items"),
  carrying the corrected substance of all four items plus the standing
  caveat that every citation gets re-verified at review time (the full
  verdict text lives only in the predecessor's session transcript).
- Explicitly NOT done: no appendix-A entries, no contract edit, no
  dc-dc-phase6 edit, no numbering consumed (stated token-free in the
  ledger block per the standing counter discipline).
- **Revert:** git revert this commit (records only; no live surface or
  script was touched).

## 3. Queue pass opened: D-131 sub-2 RULED (metal-admin-only forwarder scope)

- Operator directed a working pass through the open decision queue; order
  presented (D-131 subs -> D-129 subs -> D-071 points -> D-068 -> G12 prep
  -> netem finals -> SEC-014), one ruling per exchange (GA-R5).
- D-131 sub-2 RULED: "Metal-admin only (Recommended)" (question + utterance
  quoted in the D-131 Status block, the ruling authority). Scope of the
  rack node-DNS forwarder is fixed at the metal-admin alias only; edge
  keeps its own WAN-side DNS; SEC-010 untouched. Revisit trigger recorded:
  a D-129 (iii)/(iv) consolidation ruling.
- Same-commit status coupling (GA-R1 C1): CURRENT-STATE D-131 sentence and
  the ledger machine-block D-131 line updated to sub-3..4 open. No live
  surface touched -- dc0-node-dns.service already runs metal-admin-only,
  so the ruling codifies the running shape; zero config delta.
- **Revert:** git revert this commit (records only).