docs: record plan 09 hosted completion

docs/execution/approved-issue-plans-ledger.md

@@ -41,7 +41,7 @@ state changes are outside scope.
 | 06 image storage delivery | #2684, #2778 | blocked | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | coordinate 12/15/25 renderer/image fixtures | #2684 ACL cause fixed by merged #3432 (`35cecf9`); #2778 Browserless path obsolete; current topology unproved | #3432 hosted checks successful; audit storage/upload/PDF tests, typechecks, boundaries passed | #3432 merged before run | deployment retest plus shared real-encoding/backend/render fixture before repair | deployed digest; disposable S3/Garage/SeaweedFS/MinIO/proxy and browser/server raster matrix unavailable |
 | 07 AIO deployment | #2722 | published; late hosted fix awaiting review | queued review `task_8ff818f3e95a` | `codex/issue-2722-postgres-docs` | `7a98f6662` → published `a7b8c4cc5`; local `171637526` | none | image and repository update flows now separate through correct `reactive-resume`/`reactive_resume` log commands | Compose configs/dry-runs, DB, Markdown/link/command/diff/scope green after fix | [#3457](https://github.com/amruthpillai/reactive-resume/pull/3457) | independently rereview, then push/reply/resolve late thread | no AIO implementation; optional Unraid host smoke unavailable |
 | 08 root public resume | #2669 | plan amendment required before implementation | audit `task_9f27829ca50f` | planned `codex/issue-2669-root-resume` | `7a98f6662` → — | none | current password redirect rejects `/`; public view is slug-hook-bound; SSR canonical cannot import server env; expanded auth/canonical contract identified | audit focused API/web suites, typechecks, boundaries passed | — | amend ownership for identity-vs-return auth flow and server-derived canonical root, then dispatch coherent feature | engineering scope correction; feature remains narrower than arbitrary domain/TLS registry |
-| 09 external version backup | #2705 | published; exact-head hosted checks running | coordinator publication follow-up | `codex/issue-2705-git-backup-docs` | `7a98f6662` → `4ffdd96bd` | none | clean round-4 rereview; command-site prose requires unused output; sentinel/current resume preservation and import-as-new recovery proved | fresh coordinator 152 tests plus Markdown/diff/scope green; exact-head hosted checks queued | [#3458](https://github.com/amruthpillai/reactive-resume/pull/3458) | after hosted checks, reply/resolve two outdated duplicate threads; keep unmerged | DB integration/E2E unavailable; no sync/remote/whole-account restore |
+| 09 external version backup | #2705 | published | implementation/review chain complete | `codex/issue-2705-git-backup-docs` | `7a98f6662` → `4ffdd96bd` | none | clean round-4 rereview; command-site prose requires unused output; replies document selected revision and fresh-file fixes | fresh coordinator 152 tests plus Markdown/diff/scope and all exact-head hosted checks green; approved; zero unresolved threads | [#3458](https://github.com/amruthpillai/reactive-resume/pull/3458) | keep unmerged; monitor only | DB integration/E2E unavailable; no sync/remote/whole-account restore |
 | 10 legacy link routing | #2836 | pending implementation after brief correction | audit `task_9f27829ca50f` | planned `codex/issue-2836-retired-slug-notices` | `7a98f6662` → — | none | prospective same-username slug-attempt notice remains coherent; exact DB/API/UI/E2E owner set verified | audit focused API/web suites, DB/API/web typechecks, boundaries passed | — | correct final E2E target to `public-sharing.spec.ts`, then implement migration/API/owner UI atomically | historical cause absent; no redirects/emails/recovery; prospective partial coverage only |
 | 11 job search policy | #3010 | published | implementation/review chain complete | `codex/issue-3010-jsearch-docs` | `7a98f6662` → `1d0397884` | none | two valid wording comments fixed; independent full-diff re-review found no issues; replies carry commit evidence | 52 focused tests plus Markdown/link/diff/base/scope and all exact-head hosted checks green; approved; zero unresolved threads | [#3459](https://github.com/amruthpillai/reactive-resume/pull/3459) | keep unmerged; monitor only | real provider/browser optional gate unavailable; removal motive unknown |
 | 12 preview/export failures | #3323, #3290, #3033, #3007, #2609 | blocked corrective work; diagnostic-ready | audit `task_1c6582ccdeae` | `codex-audit-rendering-12-19` | `7a98f6662` → no source change | renderer ownership; share observation harness with 18 | zero drift; staged-preview/error-boundary baselines remain; reports cross persistence/font/PDF/viewer/deployment boundaries | audit focused web/PDF suites, affected typechecks, boundaries, build passed | — | isolate PT Sans, browser/config, and template-selection boundaries; no shared fix | exact JSON/output/browser/config/current reproduction missing |
@@ -131,6 +131,6 @@ state changes are outside scope.
 - Plan 07: PR [#3457](https://github.com/amruthpillai/reactive-resume/pull/3457), open and intentionally unmerged;
   current head `a7b8c4cc5754c1249534d0ed8993e67e57e2cb87`; hosted checks green, approved, mergeable; one late unresolved thread queued for correction.
 - Plan 09: PR [#3458](https://github.com/amruthpillai/reactive-resume/pull/3458), open and intentionally unmerged;
-  current head `4ffdd96bdda668513e26051a52c971d546e01bff` after clean re-review and fresh 152-test verification; hosted checks rerunning.
+  current head `4ffdd96bdda668513e26051a52c971d546e01bff`; all hosted checks green, approved, mergeable, zero unresolved threads.
 - Plan 11: PR [#3459](https://github.com/amruthpillai/reactive-resume/pull/3459), open and intentionally unmerged;
   current head `1d0397884c2d1b31e8a723c2b2c206bdd41a1128`; all hosted checks green, approved, mergeable, zero unresolved threads.