Document milestone-led Windows parity gates

[coneilen]

Summary

Replace failure-count escalation for new Windows parity work with observable milestones, fresh-eyes handoffs and hard cost ceilings, while preserving historical stops. Reconcile environment traps and source/capture receipts without promoting any parity row or granting new execution.

Refs #764, #826, #833, #834.

Changes

• Update the canonical kickoff and orchestration plan with the user-approved milestone policy, standing scoped allow-lists, failure-reporting rules and environment traps.
• Preserve permanent stops and original failed evidence; distinguish both hosted 59-case runs from the nine required status contexts, the capture worker's blocked input from coordinator admission, and the actual failed B slot from earlier stop comments.
• Record fixture-fix issue UiCaptureDriver fixture compile-log read races vctip.exe inherited handle (sharing violation) #833 and draft PR Fix fixture compile-log sharing races #836, pending wrapper qualification and the approved-but-unexecuted zmx seed daemon inherits redirected pipes and prevents bounded EOF attestation #834 design with their remaining gates.
• Add only a bounded matrix retrospective: all 98 canonical identities/order/statuses, the 65-item and thirty-row crosswalks, digests, source locators and privacy holds remain unchanged. Totals remain 6 Validated / 89 Partial / 3 Out of scope.

Test plan

RED: git --no-pager grep -n -F '60 AI credits' badcf51 -- investigation\windows-parity-lane-kickoff.md -> exit 1; zero matching lines; STATIC immutable-document policy absence, not behavioural RED or test-first evidence
GREEN: git --no-pager grep -n -F '60 AI credits' -- investigation\windows-parity-lane-kickoff.md -> exit 0; one matching policy line; STATIC source presence only, not runtime evidence
REGRESSION: git --no-pager diff --check -> exit 0; static source-whitespace check only; separate git --no-pager diff --numstat returned exactly 3 changed Markdown paths, not runtime regression

The baseline comparison ran after documentation authoring. The expected no-match exit establishes only absence of the policy token in the fixed baseline; it is not a passing empty test query, product-behaviour failure or test-first contract. The working-tree comparison returned one actual matching line. Original console output and separate command/exit/count receipts are retained in the owning session's files\m2-* artifacts.

Direct matrix diff inspection confirms no canonical row or crosswalk edit. git ls-files --eol returned three paths: kickoff/matrix retain LF and the orchestration plan retains its committed CRLF.

Not verified: product behaviour, native execution, compilation, GUI, screenshots, image privacy clearance, paired visual fidelity, daemon cleanup, runtime parity, and full Windows/macOS regression. Tracked changes are limited to the three documentation files; execution is limited to existing static Git checks and the existing PR-body gate, not product/native tests or images. No stopped owner or capture lease is resumed by this documentation.

At documentation freeze 2026-10-16T01:14:57.815Z, the coordinator-verified original CI for draft #836/head 359a033ba749a9bcf2648ba8b96ee424ad8f398a is blocked: port run 38832369751, job 116753854474, failed VerifyValidationRunner before Swift/real-zmx tests on a mp-start.identity sharing violation in unchanged source already using an atomic pending-file move; holder/cause are unknown. Hardening run 38832369710 Windows 2025 job 116753830293 executed 59 cases, 57 passed/2 failed (target-nonzero Failure/release/EOF evidence missing; report gate refused the failed rehearsal), underlying cause unknown. Windows 2022 job 116753830273 logged 59/59/0, still stubbed/no-desktop and not real-zmx/GUI proof. These original failed results do not establish all nine required status contexts as passing, Ready/merge or a #834 lease. The operator separately authorized one diagnostic rerun of only failed jobs on unchanged 359a033ba749a9bcf2648ba8b96ee424ad8f398a, in runs 38832369751 and 38832369710 (attempt 2), not a source fix or reset. This document grants no additional rerun, new fix owner, native/GUI/capture execution. Wrapper publication/head/merge remain unknown/pending, and no offscreen GREEN/PNG/vision has been accepted.

Checklist

• I have read the Contributing Guidelines
• I have signed off my commits (git commit -s) per the DCO
• Tests pass locally (make test)
• Code follows the existing style (make check)
• I added the test/contract before the implementation and observed the intended RED failure