Roadmap: full air-gap acceptance run

[ykshv]

Goal

Run and publish a full air-gap acceptance pass for the local voice-avatar path.

Scope

• Windows firewall check.
• WSL/container outbound network check.
• Live conversation path with outbound network blocked.
• Evidence for which endpoints, artifacts, and local services are required.

Acceptance

• The run produces public-safe evidence without tokens, private paths, hostnames, or conversation data.
• README production status can be updated from assumption to measured result.