docs(program): record NET-10 Telnet retirement

docs/program/BloomOS_Work_Program_v3.json

@@ -1164,17 +1164,22 @@
         "NET-02"
       ],
       "github_prs": [
-        621
+        621,
+        624
       ],
       "risk_tier": 3,
       "deployment_tier": "full",
       "device_gate_required": true,
-      "last_audited_main": "b43860a6ee49ce75074aac9ad99317a30ea12745",
+      "last_audited_main": "e66cfa710a5f37766130971ba050eeae41a8e562",
       "evidence": [
         "GitHub PR #621 removes the dormant whole-card FileBrowser HTTP executable, database, web theme, icon, first-run marker, boot initializer, and start/authentication code from newly assembled stable payloads while retaining fail-closed legacy entrypoints, listener detection, and process cleanup for rollback-compatible remnants on older cards; it removes 15 tracked files and 14910652 bytes",
         "the corrected stable inventory contains 333 components, 1975 files, and 261293981 bytes with 232 source-build and 101 unresolved components; 74 affected Shell tests, three RetroArch identity tests, CI ARM orchestration and risk-scope tests, Python compilation, POSIX syntax, manifest, provenance, transfer policy, dependency inventory, and diff checks passed",
         "the exhaustive local Shell gate passed 809 of 809 tests across eight shards in 140.67 seconds without retry; GitHub checks passed with static analysis in 13 seconds, native tests in 1 minute 29 seconds, AddressSanitizer in 1 minute 30 seconds, hosted Shell in 2 minutes 20 seconds, and the complete ARM packaging gate in 4 minutes 25 seconds after exact hits on the trusted-main submodule and RetroArch caches; PR #621 merged by squash as b43860a6ee49ce75074aac9ad99317a30ea12745",
-        "no deployment, update, reboot, Wi-Fi profile, listener, ROM, Save, or input mutation occurred; the Mini Plus remains on its prior signed known-good baseline with the retained DISP-04 Shell overlay, and NET-10 remains in progress until a later coherent signed Full installation and rollback checkpoint verifies retired payloads and current listener lockdown on device without recreating the prior Wi-Fi rollback regression"
+        "no deployment, update, reboot, Wi-Fi profile, listener, ROM, Save, or input mutation occurred; the Mini Plus remains on its prior signed known-good baseline with the retained DISP-04 Shell overlay, and NET-10 remains in progress until a later coherent signed Full installation and rollback checkpoint verifies retired payloads and current listener lockdown on device without recreating the prior Wi-Fi rollback regression",
+        "GitHub PR #624 removes the inherited 653-byte unauthenticated-root Telnet environment launcher, dormant start code, stable Tweaks state and visible toggle, and current enablement instructions while preserving a safe retirement route, historical versioned Onion 4.2 documentation, stale-state migration cleanup, exact BusyBox telnetd detection and termination, standalone telnetd cleanup, and fail-closed legacy entrypoints; the stable inventory falls to 333 components, 1974 files, and 261292177 bytes with 232 source-build and 101 unresolved components",
+        "the pinned Miyoo toolchain compiled the affected Tweaks consumer as a stripped 32-bit ARM EABI5 binary with SHA-256 a9688c822c339f08c64b19a3dfc927a39ba23e53b4371000100155f53c7f4e53; 79 affected Shell tests, an amended seven-test listener suite, three RetroArch identity tests, scoped cppcheck, POSIX syntax, manifest, provenance, transfer policy, dependency inventory, and diff checks passed, and the exhaustive local Shell gate passed 811 of 811 tests across eight shards in 153.78 seconds without retry",
+        "after one focused corrective commit preserved the public Telnet route as a retirement notice and fixed the initial broken Docusaurus backlink, GitHub checks passed with formatting in 26 seconds, AddressSanitizer in 1 minute 20 seconds, native tests in 1 minute 48 seconds, Docusaurus in 2 minutes 16 seconds, hosted Shell in 2 minutes 29 seconds, static analysis in 3 minutes 6 seconds, and ARM packaging in 4 minutes 40 seconds after exact trusted-cache hits; PR #624 merged by squash as e66cfa710a5f37766130971ba050eeae41a8e562",
+        "no device mutation was performed for PR #624; the older installed baseline's previously observed inherited Telnet listener is not claimed as remediated, the DISP-04 Shell overlay remains preserved, and NET-10 still requires the later coherent signed Full installation and rollback checkpoint"
       ]
     },
     {