docs: advance font diagnostic to review

docs/execution/approved-issue-plans-ledger.md

@@ -10,8 +10,8 @@ pass. Issue comments and state changes are recorded when explicitly directed by
 - Coordinator branch: `codex/issue-execution-ledger`
 - Started: 2026-09-05, Europe/Berlin
 - Merge policy changed: 2026-09-06; maintainer authorized immediate merge of complete, mergeable PRs
-- Current integrated main evidence: `97f34b7ccda73eb8d767205741d68465cbc1c0c1` after nineteen approved merges,
-  including Plan 34 PR #3473 and static-analysis follow-up PR #3474
+- Current integrated main evidence: `578cb496aa326751dd2ab1bea53db868daa35908` after twenty approved merges,
+  including Plan 34 PR #3473, static-analysis follow-up PR #3474, and Plan 33A research PR #3475
 - Status values: `pending`, `diagnosing`, `implementing`, `reviewing`, `published`, `merged`, `no-change`, `blocked`,
   `declined`, `skipped`
 - Evidence rule: each terminal disposition needs current source/GitHub proof, focused tests or reproduction evidence, and
@@ -63,13 +63,13 @@ pass. Issue comments and state changes are recorded when explicitly directed by
 | 24 date layout | #3155, #2841 | design-ready only | audit `task_47ed7eb02d48` | `codex-audit-builder-20-34` | `7a98f6662` → no source change | 24A → 24B; mutual exclusion with 32, not dependency | free-text date/period sources and current location-first order verified; geometry contract absent | audit schema/PDF suites and typechecks/boundaries passed | — | run all-template 24A geometry characterization and select width/bounds/default | physical width, bounds, alignment, default; DOCX scope not yet confirmed |
 | 25 experience company logos | #3379 | blocked implementation; contract-design-ready | audit `task_47ed7eb02d48` | `codex-audit-builder-20-34` | `7a98f6662` → no source change | 25A → 25B; coordinate 06/15 | current generic uploader has eager deletion and no reference counting/ownership validation; unsafe to reuse unchanged | audit relevant package suites/typechecks/boundaries passed | — | define asset ownership, accepted types, retention/orphan/copy/undo contract and tests | storage ownership/lifetime contract requires new decision |
 | 26 secondary color | #3373 | inventory-ready; implementation blocked | audit `task_47ed7eb02d48` | `codex-audit-builder-20-34` | `7a98f6662` → no source change | 26A → 26B; serialize semantic docs with 28 | theme has three roles; primary consumers are not classified decorative vs semantic | audit schema/PDF suites and typechecks/boundaries passed | — | enumerate primary consumers and approve decorative truth table | consumer classification/visual contract not selected |
-| 27 offline fonts | #3377 | diagnostic phase implementing | `task_127bb41b0f99` / `ctx_3d9bd07290cc` | `issue-3377-offline-font-diagnostic` | `2a4a1583b` → active | 27A → 27B; informs 30A; serialize 13/14 | worker measuring cold browser/server font paths and specifying bounded administrator-hosted manifest without production behavior change | focused font/PDF tests plus cold-network evidence required | — | complete Phase A, review evidence, publish diagnostic if durable | resolver implementation remains blocked until licenses/assets/owners/missing-font behavior proven |
+| 27 offline fonts | #3377 | diagnostic phase reviewing | `task_4d06e30d8b12` / `ctx_d897563b214f` | `issue-3377-offline-font-diagnostic` | `2a4a1583b` → `61b58ae9a` | 27A → 27B; informs 30A; serialize 13/14 | opt-in four-surface cold-network fixture and bounded administrator-hosted manifest evidence committed without production resolver behavior; independent review active | focused font/PDF/web tests, typechecks, Biome, Markdown, diff, and Playwright collection passed; live cold E2E blocked on build/PostgreSQL/server | — | independently review exact commit, then integrate current main and publish diagnostic if durable | production resolver implementation remains blocked until cold-server evidence and asset-hosting design are proven |
 | 28 basics custom styles | #3137 | merged partial unit | implementation/review/remediation complete | `codex/issue-3137-semantic-css-diagnostics` | `b85d285b6` → `28c933b55` → merge `38832014b` | serialize semantic docs/tests with 26 | gradients remain unsupported; false-positive recognition and direct-LINK assertions fixed; both threads resolved and CodeRabbit approved | main-integrated package gates plus remediation resume 47/47, PDF 10/10, typechecks, Biome, and diff green; unrelated baseline E2E flakes documented | [#3468](https://github.com/amruthpillai/reactive-resume/pull/3468) | retain residual issue until reporter names remaining failure | reporter has not named remaining failure; keep issue open |
 | 29 Onyx profile header | #2812 | blocked | audit `task_47ed7eb02d48` | `codex-audit-builder-20-34` | `7a98f6662` → no source change | placement semantics 20; accessibility order 31 | historical Onyx-only PR obsolete; no persisted generic placement owner exists | audit relevant suites/typechecks/boundaries passed | — | choose generic placement capability and produce one-page/overflow visual contract | new persisted-interface choice plus visual contract required |
 | 30 ATS export evaluation | #2845 | blocked pending measurement prerequisites | audit `task_47ed7eb02d48` | `codex-audit-builder-20-34` | `7a98f6662` → no source change | renderer baselines 12–19 and font assumptions → 30A → possible 30B | current DOCX mirrors authored layout; internal ATS/extraction analyzers exist; no preset/projection | audit PDF/DOCX/tooling suites and typechecks/boundaries passed | — | run synthetic measurement matrix, make no vendor claims; only then consider pure projection | renderer baselines; material benefit and adapter contract unproved |
 | 31 document accessibility | #2844 | diagnostic-ready after prerequisites | audit `task_47ed7eb02d48` | `codex-audit-builder-20-34` | `7a98f6662` → no source change | 20 → 21; rich text 16 → 19; renderer baselines → 31A | builder mirror has H1/H2 but strips rich structure; public viewer differs; cross-output audit absent | audit accessible/PDF/DOCX suites and typechecks/boundaries passed | — | audit DOM/PDF/DOCX/public viewer and manual screen reader before remediation | duplicate-announcement risk and reporter evidence; no assumed tagged-PDF fix |
 | 32 section date sorting | #2725 | merged | implementation/review chain complete | `codex/issue-2725-one-shot-sort` | `7a98f6662` → `5c07409ae` → merge `b85d285b6` | shared-file exclusion with 20–24; behavior independent of 24 | pure stable one-shot Experience/Education sort implemented with exact unresolved IDs, undo/persistence, and locked-state coverage; independent review found no issues | focused/full tests, typechecks, boundaries, build, catalogs, authenticated E2E, review, and hosted gates green | [#3465](https://github.com/amruthpillai/reactive-resume/pull/3465) | complete | broader autosort/preferences/custom/role behavior remains out of scope |
-| 33 Europass template | #2689 | blocked after approved research/proposal unit | audit `task_47ed7eb02d48` | planned `codex/issue-2689-europass-research` | `7a98f6662` → — | 33A → explicit visual approval → possible 33B | no current template; historical draft obsolete/incomplete; research/proposal only approved now | audit registry/gallery/schema suites and typechecks/boundaries passed | — | research authoritative references/licensing and publish concrete one-page/overflow proposal; stop | explicit future visual approval required before any template code |
+| 33 Europass template | #2689 | research merged; template blocked at approval gate | implementation/review chain complete for 33A | `codex/issue-2689-europass-research` | `2a4a1583b` → `57f2c30` → merge `578cb496a` | 33A → explicit visual approval → possible 33B | official-source mapping, canonical SVG direction, one-page/overflow/comparison artifacts, and corrected full-resolution geometry independently reviewed; no renderer code | XML/bounds/source mapping and 2480×3508 visual rereview passed | [#3475](https://github.com/amruthpillai/reactive-resume/pull/3475) | await explicit approval of proposed visual/product direction before 33B | canonical SVG direction, neutral naming, fluency labels, chronology gutter/date wrapping, and photo-free defaults require maintainer approval |
 | 34 Gengar skill layout | #2611 | merged | implementation/review chain complete | `codex/issue-2611-gengar-skill-layout` | `870388192` → `f2186d4f7` → merge `2a4a1583b` | 22 merged; shared Skills renderer serialized before 21 | Gengar-only capability restores name → rating → proficiency → keywords in visual and semantic trees; other templates unchanged; independent review clean | 51 focused PDF tests, PDF typecheck, boundaries, Biome, diff green after current-main integration | [#3473](https://github.com/amruthpillai/reactive-resume/pull/3473) | complete | no historical screenshot parity claim |
 | 35 resume import errors | #2768 | merged adjacent-fix unit | implementation/review chain complete | `codex/issue-2768-import-reproduction` | `38832014b` → `ae219f3d9` → merge `a6057abd7` | none | synthetic matrix proved and fixed empty-MIME rejection, v4 misclassification, and opaque offline-PDF messages; independent review found no product blocker; historical failure remains unproved | focused 26 web + 144 import; web typecheck/build; boundaries/Biome; E2E 13/13 plus repeats 12/12; post-main 158 tests/typecheck/Biome/diff green | [#3471](https://github.com/amruthpillai/reactive-resume/pull/3471) | retain historical needs-info issue | reporter artifact/version/error/steps absent; keep issue open |
 
@@ -165,7 +165,7 @@ pass. Issue comments and state changes are recorded when explicitly directed by
 | Plan 33A visual rereview | `task_dbf4b61a1ada` / `ctx_4ba872ef6b5c` | same Plan 33A worktree | complete; no findings; worker released | full-resolution 2480×3508 raster inspection confirmed both corrected geometry seams; XML bounds and source mapping clean; PR #3475 merged as `578cb496a` |
 | Plan 34 implementation/review | `task_422be45068f7`, `task_e7e35921c6be` | `codex/issue-2611-gengar-skill-layout` | complete; PR #3473 merged | implementation `b337d8147`, current-main head `f2186d4f7`, independent review clean, merge `2a4a1583b` |
 | Plan 21 implementation | `task_b7cc0bb3ec69` / `ctx_23c399d315ec` | `issue-3060-section-heading-visibility` | implementing | fresh worktree from Plan34-integrated main; complete schema/web/PDF/DOCX/accessibility contract |
-| Plan 27A font diagnostic | `task_127bb41b0f99` / `ctx_3d9bd07290cc` | `issue-3377-offline-font-diagnostic` | implementing | cold-network surface matrix plus bounded local manifest/license/size evidence; no production resolver change |
+| Plan 27A font diagnostic | `task_4d06e30d8b12` / `ctx_d897563b214f` | `issue-3377-offline-font-diagnostic` | reviewing | implementation commit `61b58ae9a`; generated JS spill removed; independent spec/quality/privacy review active |
 | Imported-table E2E baseline repair | `task_1060889e4ae9` / `ctx_6da7c54c9929` | `imported-table-raster-ci-fix` | diagnosing | repeated hosted Chromium result is 18 horizontal PDF path fragments versus fixture contract 17; worker is proving physical-line topology before changing assertion logic |
 
 ## Existing PR and residual accounting