[boburning]

Summary

• reconcile REC-03 with merged CI velocity PR ci: scope Bloom Shell entrypoint cppcheck #586 and its hosted timings
• reconcile NET-05 with merged runtime PR NET-05: wire guarded Wi-Fi connect lifecycle #583, corrective SDL event PR fix(shell): keep Wi-Fi polling inside SDL 1.2 event range #584, and unattended recovery PR fix(device): recover wedged Shell restarts safely #585
• record the exact signed fix(shell): keep Wi-Fi polling inside SDL 1.2 event range #584 candidate/archive/Shell identities and the read-only Mini Plus health boundary
• advance both package audit pointers to current main 94104f65ab78117960093cbbbc4f7f9eaf44475c
• keep NET-05 honestly in_progress because the physical Quick Settings/Wi-Fi-detail walkthrough and real profile-store association gate remain incomplete

Validation

• JSON parse/canonical structure: pass
• v3 ledger, platform, core-policy, and critical-surface Shell selectors: 33/33 pass
• legacy manifest: 332 components, pass
• provenance policy: 7 components, pass
• transfer policy: 6 roots, pass
• dependency inventory: 332 components, 2,131 files, 314,689,731 bytes, pass
• CI-scope policy tests: pass
• git diff --check: pass

Device evidence and limitations

The ledger records the exact signed Hot candidate already active on the USB-powered Mini Plus, plus subsequent read-only health, process, network, route, transaction, listener, and framebuffer observations. This PR itself performs no device mutation.

The evidence is intentionally limited: the saved-profile store is empty, remote evidence does not prove physical controls/LCD/audio/gameplay/save behavior, and Mini Plus evidence does not certify Original Mini revisions or Flip. NET-05 therefore remains open under #544.

Dependencies

• base: current main
• records already merged NET-05: wire guarded Wi-Fi connect lifecycle #583, fix(shell): keep Wi-Fi polling inside SDL 1.2 event range #584, fix(device): recover wedged Shell restarts safely #585, and ci: scope Bloom Shell entrypoint cppcheck #586
• no code, policy, release, network, credential, key, listener, route, update, reboot, or device-state change

Related: #434, #518, #520, #544, #583, #584, #585, #586.