BunsDev · Nov 4, 2026 · Nov 4, 2026
diff --git a/docs/archive/status-history.md b/docs/archive/status-history.md
@@ -356,3 +356,8 @@ Desktop CI memory diagnostics landed through #458 after #456’s cold transcript
   truncated-suffix false allow; the quoted-test-name case remains open.
   [Recovery verification](../reviews/2026-10-12-approval-recovery.md) passed 1,376 unit tests
   (15 skipped), 271 desktop E2E cases and seven site cases. The gate remains off by default.
+
+## In flight entries retired after #492
+
+- **Code Review setting and its gates** (#490, #491; #319, #327). A persisted setting in Settings → General replaces the `modex.codeReview` switch, off by default as Val chose on 2026-11-03, on in development builds. Adds a11y coverage of the CR-4 to CR-7 controls (C76), performance budgets as gates, CR-7 sign-out and CF-3 question-card regressions, C61 clearance beside CR-6's inline section, and theme colours for the diff's plain buttons. No live or human gate has run. [v0.4.2 review](../reviews/2026-11-03-v0.4.2-release-review.md); [Val's session](../reviews/2026-11-02-v0.5.0-val-session.md).
+- **Unmerged-work retirement safety repair (#486):** signed candidate `783898a` is pushed on `retire-safety-repair`; it requires matching ownership, archives index and working state separately, verifies raw working/ignored recovery, and retains the original checkout indefinitely instead of deleting files. Focused disposable-fixture results and design are in [the repair review](../reviews/2026-11-02-retirement-safety-repair.md). Pinned installation, build, full unit tests (2,325 passed, 26 skipped), typecheck and independent follow-up review passed; protected CI and landing remain pending. No real worktree retirement or repair-specific Electron e2e has been exercised.
diff --git a/docs/reviews/2026-11-04-docs-reconciliation.md b/docs/reviews/2026-11-04-docs-reconciliation.md
@@ -39,7 +39,7 @@ Left unticked on purpose:
 - #276's two boxes: focus after answering is in open #489.
 - #327's budget box and AC5: gates exist (#490), but nothing on record shows Val agreed the numbers.
 - #327 AC6: the matrix is not final.
-- #322, #323: re-check after #492 lands, since it edits those rows.
+- #322 "Preserve logical focus" and #323 "Match the measured" and AC5: re-checked after #492 landed. #491 measures the composer clearance, but these boxes also need the human keyboard/VoiceOver pass or the original references.
 
 ## Left open
 

diff --git a/docs/status.md b/docs/status.md
@@ -65,7 +65,7 @@ and [landing verification](reviews/2026-10-11-landing-clarity.md).
 
 The published application source is `6a97d23aaea315b29008890f25dde2d7ea07f1d0` (v0.4.1). v0.4.2 is in preparation with Code Review hidden ([review](reviews/2026-11-03-v0.4.2-release-review.md)). Later source deliveries remain unreleased: #462 records local-model context provenance; #461 enforces local-only auxiliary dispatch; #465 refuses known cloud-routed and non-generative models; #463 (`32f1cb4`) defers Markdown far from the view so long threads open fast. Main still does not construct `LocalExecution`; native qualification and product admission remain separate gates. #459, #460 and #464 (`3d72c6e`, the CR-3 acceptance re-run) are evidence/documentation deliveries after the release source.
 
-Also unreleased, since that summary: #467 (`8a28df3`) adds the Claude account pool with OrcaRouter keys; #477 (`49aa449`) keeps Code Review links right after a repository rename; #487 (`b785054`) adds CF-3 draft and YOLO regressions; #488 (`68fe543`) adds owner-authorized worktree retirement; #490 (`a4f2f70`) adds the Code Review setting and its gates, and turns Code Review on by default on `main`. Open #492 turns that default off before anything ships, because Val chose v0.4.2 with Code Review hidden on 2026-11-03. #468, #470, #472, #473, #474, #476 and #483 are evidence or documentation only.
+Also unreleased, since that summary: #467 (`8a28df3`) adds the Claude account pool with OrcaRouter keys; #477 (`49aa449`) keeps Code Review links right after a repository rename; #487 (`b785054`) adds CF-3 draft and YOLO regressions; #488 (`68fe543`) adds owner-authorized worktree retirement; #490 (`a4f2f70`) adds the Code Review setting and its gates, and turned Code Review on by default. #492 (`4297235`) turned that default off, because Val chose v0.4.2 with Code Review hidden on 2026-11-03. #468, #470, #472, #473, #474, #476 and #483 are evidence or documentation only.
 
 ## v0.4.1 publication and remaining acceptance
 
@@ -109,9 +109,9 @@ before relying on a tick.
 | [#276](https://github.com/TypeSafeAI/modex/issues/276) CF-3 | 11/13 | Draft, attachment and YOLO regressions landed (#487, #490); focus after answering is in open #489. Human D/P rows live on #281 | Land #489; Val runs D1–D5 |
 | [#280](https://github.com/TypeSafeAI/modex/issues/280) CF-7 | 11/14 | Steps 1, 2 and 4: model-proposed relations, file hashes and selection/notes context are not built; step-level linking was retired | Val reviews the two saved Notes and records steps 1, 2 and 4 as deferred or retired |
 | [#281](https://github.com/TypeSafeAI/modex/issues/281) CF-8 | 8/27 | Keyboard A1–A8, VoiceOver B1–B7, CF-3 D1–D5, P1–P4 and P6; memory measurement; ChatGPT multi-agent restriction check; staged release recommendation; list of remaining visual differences. C1–C5, V1–V3 and P5 are deferred | Val chooses the candidate, then runs A1–A8 and D1–D5 |
-| [#319](https://github.com/TypeSafeAI/modex/issues/319) CR tracker | 2/10 | CR-3 to CR-8 acceptance; R1–R4 reconstruction comparison | Land #472 (current CR-8 matrix) |
-| [#322](https://github.com/TypeSafeAI/modex/issues/322) CR-3 | 10/14 | Original-reference comparison (AC1), keyboard/VoiceOver (AC4); clearance beside CR-6's inline section is measured on `main` (#491); re-check the issue box against it | Val runs the [CR-8 VoiceOver checklist](reviews/2026-10-22-cr8-voiceover/checklist.md) |
-| [#323](https://github.com/TypeSafeAI/modex/issues/323) CR-4 | 10/14 | Original R1/R2 comparison, VoiceOver; clearance beside CR-6's inline section is measured on `main` (#491); re-check the issue box against it; avatars wait on decision 1 | Val decides on references |
+| [#319](https://github.com/TypeSafeAI/modex/issues/319) CR tracker | 2/10 | CR-3 to CR-8 acceptance; R1–R4 reconstruction comparison | Val's [one session](reviews/2026-11-02-v0.5.0-val-session.md) |
+| [#322](https://github.com/TypeSafeAI/modex/issues/322) CR-3 | 10/14 | Original-reference comparison (AC1), keyboard/VoiceOver (AC4); clearance beside CR-6's inline section is measured on `main` (#491), but these boxes also need the person-run checks | Val runs the [CR-8 VoiceOver checklist](reviews/2026-10-22-cr8-voiceover/checklist.md) |
+| [#323](https://github.com/TypeSafeAI/modex/issues/323) CR-4 | 10/14 | Original R1/R2 comparison, VoiceOver; clearance beside CR-6's inline section is measured on `main` (#491), but these boxes also need the person-run checks; avatars wait on decision 1 | Val decides on references |
 | [#324](https://github.com/TypeSafeAI/modex/issues/324) CR-5 | 12/14 | Original R4 comparison (AC1); the Viewed toggle waits on decision 5 | Val decides on R4 references or re-captures |
 | [#325](https://github.com/TypeSafeAI/modex/issues/325) CR-6 | 13/14 | Authorized live native smoke (AC6) | Val names `owner/repo#n` for the smoke |
 | [#326](https://github.com/TypeSafeAI/modex/issues/326) CR-7 | 13/14 | Live canary on a disposable repository (AC6) | Val names a disposable repository |
@@ -127,9 +127,8 @@ before relying on a tick.
 
 ## In flight
 
-- **Code Review setting and its gates** (#490, #491; #319, #327). A persisted setting in Settings → General replaces the `modex.codeReview` switch, off by default as Val chose on 2026-11-03, on in development builds. Adds a11y coverage of the CR-4 to CR-7 controls (C76), performance budgets as gates, CR-7 sign-out and CF-3 question-card regressions, C61 clearance beside CR-6's inline section, and theme colours for the diff's plain buttons. No live or human gate has run. [v0.4.2 review](reviews/2026-11-03-v0.4.2-release-review.md); [Val's session](reviews/2026-11-02-v0.5.0-val-session.md).
-- **Unmerged-work retirement safety repair (#486):** signed candidate `783898a` is pushed on `retire-safety-repair`; it requires matching ownership, archives index and working state separately, verifies raw working/ignored recovery, and retains the original checkout indefinitely instead of deleting files. Focused disposable-fixture results and design are in [the repair review](reviews/2026-11-02-retirement-safety-repair.md). Pinned installation, build, full unit tests (2,325 passed, 26 skipped), typecheck and independent follow-up review passed; protected CI and landing remain pending. No real worktree retirement or repair-specific Electron e2e has been exercised.
-- **Code Review acceptance** (#319). Every slice's code is on `main` (design and history: [design page](design/code-review.md), [CR-8 matrix](reviews/2026-11-01-cr8-acceptance-matrix.md)). #490 added the Settings → General setting, C76 accessibility coverage, performance budgets as gates and the CR-7 sign-out and CF-3 question-card regressions; it also carries #481, #484, #485 and #491. No live provider run, live GitHub write, VoiceOver pass or reference comparison has happened. Those, plus decisions 1, 5, 6 and 7 and the C58/C59 omissions, are listed in [Val's one session](reviews/2026-11-02-v0.5.0-val-session.md).
+- **v0.4.2 release.** #492 (`4297235`) prepared it with Code Review hidden by default. It is not tagged or published. [Review](reviews/2026-11-03-v0.4.2-release-review.md).
+- **Code Review acceptance** (#319). Every slice's code is on `main` (design and history: [design page](design/code-review.md), [CR-8 matrix](reviews/2026-11-01-cr8-acceptance-matrix.md)). Built apps hide it by default (#492); Settings → General can show it. #490 added that setting, C76 accessibility coverage, performance budgets as gates and the CR-7 sign-out and CF-3 question-card regressions; it also carries #481, #484, #485 and #491. No live provider run, live GitHub write, VoiceOver pass or reference comparison has happened. Those, plus decisions 1, 5, 6 and 7 and the C58/C59 omissions, are listed in [Val's one session](reviews/2026-11-02-v0.5.0-val-session.md).
 - **Conversation fidelity** ([tracker #273](https://github.com/TypeSafeAI/modex/issues/273)). CF-3, CF-7 and CF-8 stay open; their code is on `main`. #489 (open) repairs keyboard focus after answering a native question. The human gates are under [Open acceptance gates](#open-acceptance-gates).
 - **Local models** ([tracker #376](https://github.com/TypeSafeAI/modex/issues/376)). Main holds LM-1's contract, LM-2's loopback discovery, LM-3's Codex execution and LM-5's refusal boundaries, but does not construct `LocalExecution`, so a built app refuses every local selection. There is no UI (LM-4), and no real local generative runtime has been exercised. The next step is Val's five LM-5 answers: the decision record is `docs/reviews/2026-11-03-lm5-val-decision.md` on the unmerged branch `lm-ready` (`01101cb`), next to the LM-7 evidence map and the LM-4 design brief. `lm5-fixtures-rebased` (`7a38090`) rebases open #475, and `lm5-admission` (`1276a29`) is the unmerged admission branch. [How it works](local-models.md#lm-3-local-execution-through-codex).
 - **Claude account pool live acceptance.** The pool landed in #467. No live OrcaRouter turn, second subscription or real usage-limit message has run. [Design and limits](claude-accounts.md), [repair evidence](reviews/2026-11-01-claude-pool-repair.md).