docs(program): record NET-10 VNC retirement

docs/program/BloomOS_Work_Program_v3.json

@@ -1168,12 +1168,13 @@
         624,
         627,
         630,
-        636
+        636,
+        639
       ],
       "risk_tier": 3,
       "deployment_tier": "full",
       "device_gate_required": true,
-      "last_audited_main": "90baf9daf24383b8a17b2ea67f31ad7486ac075f",
+      "last_audited_main": "f11077378821fc182846ba6abedce094e8836f60",
       "evidence": [
         "GitHub PR #621 removes the dormant whole-card FileBrowser HTTP executable, database, web theme, icon, first-run marker, boot initializer, and start/authentication code from newly assembled stable payloads while retaining fail-closed legacy entrypoints, listener detection, and process cleanup for rollback-compatible remnants on older cards; it removes 15 tracked files and 14910652 bytes",
         "the corrected stable inventory contains 333 components, 1975 files, and 261293981 bytes with 232 source-build and 101 unresolved components; 74 affected Shell tests, three RetroArch identity tests, CI ARM orchestration and risk-scope tests, Python compilation, POSIX syntax, manifest, provenance, transfer policy, dependency inventory, and diff checks passed",
@@ -1193,7 +1194,11 @@
         "GitHub PR #636 removes the misleading stable Tweaks WPS and inherited-hotspot controls, unreachable inherited hotspot mutation functions, three unused WPS progress images, and current enablement copy while retaining fail-closed WPS and hotspot compatibility entrypoints, migration-only hotspotState cleanup, exact hostapd and dnsmasq termination, and hostapd, dnsmasq, netplay, and candidate assets for the independent NET-08 audit; the stable inventory falls to 328 components, 1969 files, and 260922113 bytes with 232 source-build and 96 unresolved components",
         "the pinned Miyoo toolchain compiled the affected Tweaks consumer as a stripped 32-bit ARM EABI5 binary with SHA-256 fa4b1aabf6bfce855aa4fbedcab106420f7e9bc67f5ad4d0bed995ac94037c2d; the final focused security and provenance set passed 45 of 45 tests, scoped cppcheck passed in 1.25 seconds, native and AddressSanitizer each passed 595 of 595 tests in 18.74 and 31.35 seconds, and the exhaustive local Shell gate passed 816 of 816 tests across eight shards without retry after focused manifest assertions were reconciled",
         "GitHub checks passed with formatting in 16 seconds, static analysis in 28 seconds, native tests in 1 minute 28 seconds, AddressSanitizer in 1 minute 53 seconds, Docusaurus in 2 minutes 21 seconds, hosted Shell in 2 minutes 26 seconds, and exhaustive ARM packaging in 4 minutes 19 seconds; PR #636 merged by squash as 90baf9daf24383b8a17b2ea67f31ad7486ac075f",
-        "no deployment, update, reboot, Wi-Fi, profile, listener, ROM, Save, input, overlay, or recovery-state mutation occurred for PR #636; VNC remains separately unaudited, NET-08 still owns the transactional hotspot replacement, and NET-10 remains in progress until those boundaries and the coherent signed Full installation and rollback checkpoint are resolved"
+        "no deployment, update, reboot, Wi-Fi, profile, listener, ROM, Save, input, overlay, or recovery-state mutation occurred for PR #636; VNC remained separately unaudited at that checkpoint, NET-08 still owns the transactional hotspot replacement, and NET-10 remained in progress pending the VNC boundary and coherent signed Full installation and rollback checkpoint",
+        "GitHub PR #639 removes the provenance-unresolved 41692-byte vncserver and approximately 221340-byte libvncserver.so.1 payloads, the unauthenticated TCP/5900 Tweaks launcher and controls, and current enablement copy while retaining an explicit retirement route, migration-only vncServer cleanup, exact vncserver listener and process classification, and exact older-card process termination; the stable inventory falls to 326 components, 1967 files, and 260659274 bytes with 232 source-built and 94 unresolved components",
+        "the pinned Miyoo toolchain compiled the affected Tweaks consumer as a stripped 32-bit ARM EABI5 binary with SHA-256 8885a1b5b656801126dfc142f01f9f4f413af585f3ad9ef50d13d9fb954a20cf; the final focused networking, manifest, provenance, payload, CI-scope, and compatibility set passed 47 of 47 tests, the post-correction isolation set passed 31 of 31, scoped cppcheck passed in 1.20 seconds, native and AddressSanitizer each passed 595 of 595 tests in 18.77 and 31.71 seconds, and the final exhaustive local Shell gate passed 818 of 818 tests across eight shards",
+        "GitHub checks passed with formatting in 14 seconds, static analysis in 20 seconds, native tests in 1 minute 28 seconds, AddressSanitizer in 1 minute 46 seconds, Docusaurus in 2 minutes 11 seconds, hosted exhaustive Shell in 4 minutes 53 seconds, and full ARM packaging in 5 minutes 21 seconds; PR #639 merged by squash as f11077378821fc182846ba6abedce094e8836f60",
+        "no deployment, update, reboot, Wi-Fi, profile, listener, ROM, Save, input, overlay, or recovery-state mutation occurred for PR #639; older installed or rollback payloads may still retain inherited VNC bytes, NET-08 still owns the transactional hotspot replacement, and NET-10 remains in progress until a coherent signed Full Mini Plus installation and rollback checkpoint verifies the retired services and listener lockdown without recreating the prior Wi-Fi rollback regression"
       ]
     },
     {