# Session changelog 2026-07-21 (third session) -- disconnect collapse + netem install verification

One changelog per session (GA-R2/D1). Status lives ONLY in
docs/CURRENT-STATE.md; this file is narrative + reverts. Predecessor
(close-and-delivery session, disconnected after the operator ran the
netem-tc install): docs/changelog-20260721-close-and-delivery.md.

## 1. Lingering-session sweep (read-only; nothing to collapse but records)

- Verified: working tree clean at pushed HEAD 8a9c04c; zero unpushed
  commits; single worktree; no stray run-logged windows or tofu
  processes; branches = stage branch + main only, both synced. The
  disconnected session's seven deliverable commits were ALL already
  durable -- the only outstanding items were its ledger bookend and the
  record of the operator-run netem-tc install.
- One divergence FLAGGED (logged, not fixed -- queued finding):
  `ledger-scan.sh` omits D-131 from its PROPOSED/OPEN list because the
  Status line begins "PARTIALLY RULED" (D-129's "OPEN / PARTIALLY
  RULED" phrasing is caught; D-131's is not) even though sub-2..4 are
  OPEN. Candidate fix: widen the scan's status-line match or adopt a
  status-wording convention. No information is lost today (the ledger's
  hand-seeded block carries D-131).

## 2. netem-tc sudoers install VERIFIED (read-only)

- The install command itself was operator-run interactively in the
  predecessor's window (fragment-header command, verbatim). This
  session re-verified without root: installed file 0440 root:root,
  byte count identical to the repo fragment (1888), and non-interactive
  `sudo -n -l` grant checks exit 0 for both verbs on virbr5 (the step-E
  target) plus spot checks on virbr7/virbr3 -- which also proves the
  installed file parses (a sudoers parse error disables the file).
  Capture: docs/audit/netem-sudo-install-20260721.txt.
- CURRENT-STATE step-E paragraph corrected in this same commit (GA-R1
  C1/C2): install PENDING -> INSTALLED+VERIFIED; remaining path stated
  (wire modules/netem-link into the outer root from its HELD comment,
  adds-only plan gate, then the gated placeholder run).
- **Revert:** git revert this commit (records only); to remove the live
  grant: sudo rm /etc/sudoers.d/netem-tc && sudo visudo -c.

## 3. Predecessor bookend LANDED (this commit)

- Bounded SESSION CLOSE entry for the close-and-delivery session
  appended to docs/session-ledger.md (GA-R4; second same-day
  disconnect-then-successor-lands cycle, same pattern as item 1 of the
  predecessor's own changelog).
- **Revert:** git revert this commit (returns the predecessor to
  not-durable state; live cloud untouched).