[boburning]

Program mapping

Records merged NET-10 VNC retirement #639. This evidence-only slice is based directly on current main at f11077378821fc182846ba6abedce094e8836f60 and has no stacked dependency.

Summary

• add GitHub PR security(network): retire inherited VNC (NET-10) #639 to NET-10
• record the exact squash commit, retired payload inventory, ARM binary identity, and local/hosted gate evidence
• replace the earlier "VNC unaudited" boundary with the completed host-side audit while preserving historical chronology
• keep NET-08 as the transactional hotspot owner
• keep NET-10 in_progress until a coherent signed Full Mini Plus installation and rollback checkpoint verifies the retired services and listener lockdown

Validation

• JSON parse: passed
• all ledger-consuming/guarding focused Shell tests: 46/46 passed
• git diff --check: passed

Device evidence and limitations

No device mutation was performed for either this ledger update or PR #639. The ledger explicitly preserves the installed signed Mini Plus baseline and DISP-04 overlay boundary. Host tests and the pinned ARM build do not certify physical controls, LCD, Wi-Fi recovery, rollback behavior, or any other SSD202D device.