docs: align plan 16 fix with approved scope

docs/execution/approved-issue-plans-ledger.md

@@ -48,7 +48,7 @@ state changes are outside scope.
 | 13 font/glyph/spacing | #3249, #3159, #3147, #3093, #3089, #2988 | blocked corrective work; diagnostic-ready | audit `task_1c6582ccdeae` | `codex-audit-rendering-12-19` | `7a98f6662` → no source change | serialize font sources with 14/27 | merged metrics/cache/Unicode fixes present and passing; residuals require per-font/per-symptom fixtures | audit focused PDF/font suites, affected typechecks, boundaries, build passed | — | retain regressions; create residual unit only from exact failing font fixture | missing Ropa Sans/source strings/font hashes/before-after artifacts |
 | 14 RTL export layout | #3275 | blocked corrective work; diagnostic-ready | audit `task_1c6582ccdeae` | `codex-audit-rendering-12-19` | `7a98f6662` → no source change | serialize renderer/fonts with 13/27 | merged canvas-direction fix remains; broader shaping/bidi cause unproved | audit RTL/preview suites, affected typechecks, boundaries, build passed | — | run controlled same-bytes export matrix against approved shaping oracle | exact JSON/font/version and known-good reference absent |
 | 15 picture fitting/style | #3168, #3088, #2794, #2782 | 15A published; hosted review queued; other causes blocked | queued `task_06bedd03c57a` | `codex/issue-2782-picture-fit` | `7a98f6662` → `6145d5a59` | coordinate 06/25; schema/PDF owner exclusion | Cover/Contain geometry, computed CSS behavior, and shared props review findings fixed via mutation-tested TDD; final rereview found no issues; two low-risk Codacy threads await independent disposition | fresh coordinator 130 focused tests, four affected typechecks, boundaries, and production build green; full suite and 2 authenticated raster E2E green in independent review; autofix/Codacy/Greptile/Mintlify green | [#3461](https://github.com/amruthpillai/reactive-resume/pull/3461) | after E2E/CodeRabbit settle and slot frees, independently adjudicate all hosted feedback; keep unmerged | delivery/centering issues still lack source revisions/assets/expected crop |
-| 16 imported table borders | #3196 | review fixes implementing | fix `task_7b7368639ff8` / `ctx_ba9ed045764f` | `codex/issue-3196-editable-tables` | `7a98f6662` → `83aca184e`, fix active | rich-text owner; must precede 19/31 | review found P1 unsupported-descendant preservation bypass plus P2 conversion and unrelated-save proof gaps; supported table/PDF behavior otherwise green | implementation focused/full tests, typechecks, boundaries, build, and E2E green; fix TDD running | — | fix all three findings, rerun full gates, independently rereview before publication | historical visual equivalence lacks reporter HTML/JSON but feature contract is approved |
+| 16 imported table borders | #3196 | review fixes implementing | fix `task_7b7368639ff8` / `ctx_ba9ed045764f` | `codex/issue-3196-editable-tables` | `7a98f6662` → `83aca184e`, fix active | rich-text owner; must precede 19/31 | review found P1 unsupported-descendant preservation bypass plus P2 out-of-scope conversion UI and unrelated-save proof gaps; pinned plan resolves conversion by removal, not new semantics | implementation focused/full tests, typechecks, boundaries, build, and E2E green; fix TDD running | — | fix fail-closed detection, remove conversion action, prove unrelated persistence, rerun gates, independently rereview | historical visual equivalence lacks reporter HTML/JSON but feature contract is approved |
 | 17 list/skill pagination | #2751, #3040 | blocked corrective work; diagnostic-ready | audit `task_1c6582ccdeae` | `codex-audit-rendering-12-19` | `7a98f6662` → no source change | renderer owner shared with 13/14/18 | merged ordered-marker/wrap/level-gap fixes present; current residual not reproduced | audit focused PDF suites, typecheck, boundaries, build passed | — | retain controls; add fix only from exact failing list/skill fixture | #2751 source absent; #3040 current fixture no longer proves residual clipping |
 | 18 preview/export geometry | #2683 | blocked corrective work; diagnostic-ready | audit `task_1c6582ccdeae` | `codex-audit-rendering-12-19` | `7a98f6662` → no source change | share output-boundary harness with 12; viewer owner exclusion | current viewport/page-size/margin baselines pass; video alone cannot locate cause | audit page/preview tests, affected typechecks, boundaries, build passed | — | compare identical preview/download bytes, MediaBoxes, ink bounds, viewport, DPR | exact JSON/PDF/browser/DPR/zoom/page settings absent |
 | 19 literal rich-text whitespace | #3397 | pending after 16 | unassigned | planned `codex/issue-3397-literal-whitespace` | `7a98f6662` → — | stack/rebase after 16; coordinate DOCX/PDF/editor with 31 | verified current marked-policy gap; approved marker contract and four-space tabs remain implementation-ready | audit whitespace/indentation suites, affected typechecks, boundaries, build passed | — | implement web/PDF/DOCX atomically after table seam stabilizes | no product blocker; serialized file ownership only |
@@ -119,7 +119,7 @@ state changes are outside scope.
 | Plan 07 late fix rereview | `task_8ff818f3e95a` / `ctx_b73be2273e01` | same Plan 07 worktree | complete; no findings; pushed; worker released | exact head `171637526`; full-diff/Compose review and fresh coordinator gates green; hosted checks rerunning |
 | Plan 16 implementation | `task_f3d05a6ebb86` / `ctx_686ba93fc8af` | `codex/issue-3196-editable-tables` | complete; worker released | commit `83aca184e`; atomic editable supported tables, lossless unsupported fallback, PDF border geometry, persistence/E2E |
 | Plan 16 independent review | `task_e52d01cff964` / `ctx_63c00e7abb56` | same Plan 16 worktree | complete; changes required; worker released | P1 unsupported descendant markup can normalize destructively; P2 conversion is still HTML and E2E does not prove unrelated save persistence; orchestration report accepted by brief |
-| Plan 16 review fix | `task_7b7368639ff8` / `ctx_ba9ed045764f` | same Plan 16 worktree | implementing | fail-closed unsupported grammar, explicit confirmed plain-text conversion, and persisted unrelated-edit E2E proof via TDD |
+| Plan 16 review fix | `task_7b7368639ff8` / `ctx_ba9ed045764f` | same Plan 16 worktree | implementing | fail-closed unsupported grammar, removal of out-of-scope conversion UX, and persisted unrelated-edit E2E proof via TDD |
 | Plan 20A implementation | `task_4237c974827a` / `ctx_00770ded7b0d` | `codex/issue-3378-hidden-section-recovery` | implementing | hidden-section recovery unit from current `origin/main`; test, commit, and report without publication |
 | Plan 10 implementation | `task_fd191afc86ba` / `ctx_5100e7419c11` | `codex/issue-2836-retired-link-notices` | implementing | prospective 90-day owner-only retired-link attempt notices with migration, privacy limits, and E2E |
 

docs/execution/briefs/fix-review-plan-16.md

@@ -12,10 +12,9 @@ Fix every review finding with TDD while preserving existing supported-table beha
    `section` with `aria-label`, multiple `tbody` groups, malformed/repaired table markup, and other representative
    unrepresented descendants. Ordinary edits, prop updates, lock/keyboard paths, and cancel must preserve exact original
    HTML bytes for these cases. Do not widen unsafe HTML support.
-2. Define successful conversion as explicit plain text, not normalized table HTML. Use boolean confirmation UI matching
-   action; remove ignored text-prompt value. Test confirmed output exactly, cancellation, reopening/editability after
-   conversion, and semantics for cells, rows, paragraphs, inline marks, captions, spans, and empty cells according to
-   approved Plan 16 direction. Keep the operation explicit and irreversible only after confirmation.
+2. Follow pinned Plan 16: destructive conversion UX is outside this repair. Remove the `Convert to editable text` action
+   and `usePrompt` path entirely rather than inventing raw-text or normalized-HTML semantics. Test that unsupported content
+   exposes only an accessible read-only notice and no conversion affordance or ordinary interaction can overwrite it.
 3. Strengthen authenticated E2E so an unrelated Basics-name edit proves a real save transition and survives reload before
    table assertions. Avoid accepting a stale pre-existing Saved status.