docs(program): record NET-07 metadata consumer

docs/program/BloomOS_Work_Program_v3.json

@@ -1090,12 +1090,13 @@
       "github_prs": [
         592,
         594,
-        596
+        596,
+        598
       ],
       "risk_tier": 2,
       "deployment_tier": "warm",
       "device_gate_required": true,
-      "last_audited_main": "94c7d25d1f4d683356e22991b47454d97b5cd472",
+      "last_audited_main": "be65bd2890fb93856a15be7d5ad5728663ff3f94",
       "evidence": [
         "PR #592 begins NET-07 by making bloom-time the single owner of a bounded NTP opportunity after canonical association; it removes the inherited IP polling, ping retries, insecure time API requests, and duplicate retry loop while preserving an idempotent completion marker and fail-closed live/stale single-flight ownership",
         "exact commit 4335e64de932f87d6235fcd09049abc5cbd29514 passed 749 hosted Shell tests in 2 minutes 13 seconds, 14 focused time-service tests, the 332-component legacy manifest, seven-component provenance policy, six-root transfer policy, and the exact 314688679-byte dependency inventory",
@@ -1106,7 +1107,10 @@
         "exact commit 9436a0969f1e2fc129b1480ac210de4314bfbbe1 passed 23 focused network tests and the hosted exhaustive Shell gate in 2 minutes 7 seconds, then squash-merged to main as 8deda7963d31215b99d03ea8715f9039c03ea972 without device mutation; lifecycle publication and client consumption remain follow-up NET-07 scope",
         "PR #596 publishes connectivity transitions from the qualified Mini Plus station owner only after carrier and global IPv4 are both ready, preserves an already-healthy station, and makes publication strictly secondary so an event failure cannot restart or roll back Wi-Fi",
         "exact commit 931519893a8c783a08050f076df8be8808a11345 passed 38 combined network and Wi-Fi tests, the hosted exhaustive Shell gate in 2 minutes 10 seconds, and signed workflow 33335469092 in 7 minutes 58 seconds; archive SHA-256 78a79d218d0cdbb8315f489dfbb931c59eda51044efc6b6da9e0798e964bbccb had a verified Ed25519 manifest and packaged bloom-network and bloom-wifi were byte-identical to reviewed source",
-        "a pinned-key Mini Plus /tmp-only gate published and acknowledged associated generation 1 for metadata, update, and sync while preserving Shell PID 1125, wpa_supplicant PID 994, udhcpc PID 1280, association, IP, route, session, transaction, known-good update, listener audit, and signed Shell overlay; all temporary files were removed, no radio restart or update occurred, and remote evidence does not certify physical behavior or other devices; PR #596 squash-merged to main as 94c7d25d1f4d683356e22991b47454d97b5cd472 while normal-runtime client consumption remains follow-up NET-07 scope"
+        "a pinned-key Mini Plus /tmp-only gate published and acknowledged associated generation 1 for metadata, update, and sync while preserving Shell PID 1125, wpa_supplicant PID 994, udhcpc PID 1280, association, IP, route, session, transaction, known-good update, listener audit, and signed Shell overlay; all temporary files were removed, no radio restart or update occurred, and remote evidence does not certify physical behavior or other devices; PR #596 squash-merged to main as 94c7d25d1f4d683356e22991b47454d97b5cd472 while normal-runtime client consumption remains follow-up NET-07 scope",
+        "PR #598 connects the metadata event client to the persistent library scheduler: association requeues only network-required waiting work, offline transitions park only network-required queued or retry-wait work, exact generations are acknowledged only after validated observation, and consumer failure remains secondary to station ownership; update and sync consumers remain follow-up NET-07 scope",
+        "exact head 4c264c153bfe8c58f1b22ff726c41cc65c2ea614 passed all six required checks, including the corrected hosted Shell gate in 2 minutes 22 seconds, Static analysis in 3 minutes 56 seconds, and Check build in 3 minutes 54 seconds; signed workflow 33337476823 passed in 7 minutes 45 seconds and produced the 199849446-byte archive SHA-256 4625898fbfbc72ae71fe73af6daedc2f6b461487194a351f3c49d1562c15d8fe with verified Ed25519 signature and exact reviewed script identities",
+        "a strict pinned-key Mini Plus /tmp-only gate observed and acknowledged synthetic associated generation 1, proved that an injected offline observation failure retained generation 2, and acknowledged it on retry while preserving Shell PID 1125, wpa_supplicant PID 994, udhcpc PID 1280, association, IP, route, session, transaction, known-good update, and listener audit; no live catalog, radio, profile, key, listener, route, process, reboot, or update mutation occurred, all temporary files were removed, and this remote fixture evidence does not certify physical behavior or other devices; PR #598 squash-merged as be65bd2890fb93856a15be7d5ad5728663ff3f94"
       ]
     },
     {