[boburning]

Program mapping

NET-10 legacy listener cleanup. This slice is based directly on current main (1b8e124a1fd28265ba025f425d056f7af5e884e4) and preserves NET-08 as the separately gated transactional hotspot implementation. It is not stacked on an unmerged branch.

Closes #635.

Summary

• remove the misleading WPS and inherited hotspot controls from stable Tweaks
• remove unreachable inherited hotspot mutation functions from the compatibility networking script
• remove three unused WPS progress images from the stable payload
• replace current hotspot/WPS enablement copy with an explicit retirement and NET-08 boundary
• retain the fail-closed WPS and hotspot compatibility entrypoints, migration-only .hotspotState cleanup, and exact inherited hostapd/dnsmasq termination
• retain hostapd, dnsmasq, netplay, and hotspot candidate assets for the independent NET-08 audit; this PR does not certify or activate them
• keep VNC outside this slice for an independent privacy/security audit

Validation

• final focused listener, CI-scope, branding, manifest, provenance, and FAT payload set: 45/45
• exhaustive Shell: 816/816 across eight bounded shards; zero not ok; all shard statuses zero
• native: 595/595 in 18.74 seconds
• AddressSanitizer: 595/595 in 31.35 seconds with leak detection and halt-on-error enabled
• focused cppcheck for src/tweaks: passed in 1.25 seconds (pre-existing informational/style notes only)
• pinned ARM toolchain: stripped 32-bit ARM EABI5 Tweaks executable, SHA-256 fa4b1aabf6bfce855aa4fbedcab106420f7e9bc67f5ad4d0bed995ac94037c2d
• manifest/provenance: 328 components, 1,969 files, 260,922,113 bytes; 232 source-built and 96 unresolved components
• RetroArch build identity: 3/3
• CI orchestration and scope policy: passed; full ARM/native/shell/visual, src/tweaks static analysis, risk 3
• POSIX syntax, branding policy, MDX tag balance, and git diff --check: passed

Device evidence

No device mutation was performed. The Mini Plus remains on its retained signed baseline and existing DISP-04 overlay; this PR does not change Wi-Fi, profiles, listeners, update state, overlay state, power, or input. No physical certification claim is made.

Limitations and follow-up

• NET-08 must provide a transactional, rollback-timed hotspot owner and signed Mini Plus evidence before hotspot can return to stable settings.
• Retained inherited/netplay hotspot assets are not authorized by this slice and remain subject to the independent NET-08 audit.
• VNC remains present and is intentionally deferred to a separate privacy/security audit.
• The coherent signed Full checkpoint remains required to verify older-card remnants and rollback behavior on-device.