docs: record plan 02 hosted findings

docs/execution/approved-issue-plans-ledger.md

@@ -34,7 +34,7 @@ state changes are outside scope.
 | Unit | Issues | Status / current validity | Owner | Worktree / branch | Base → head | Dependencies | Evidence | Tests | PR | Next action | Blockers |
 | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
 | 01 account login/recovery | #3166, #3164, #3078, #3046, #2897, #2837 | blocked | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | none | zero drift; live issues remain split; #3046/#3078 have merged #3095 candidate only | auth 42, email 6, focused/full API/server suites and affected typechecks/boundaries passed in audit | — | select exact auth/mail/API boundary only after current sanitized trace | current cloud digest, provider/account method, request/status trace, controlled mailbox |
-| 02 hosted v4 recovery | #3181, #2760 | published; autofix review queued | queued `task_796f15a35422` | `codex/issue-3181-recovery-procedure` | `7a98f6662` → reviewed `4125074f9`; bot head `6c4743935` | #2760 identity branch depends on 01 evidence | lexical duplicate-member rejection and safe IDs reviewed clean; autofix removed two unused internal type exports | pre-bot 59 tooling, 54 API, 21 auth plus all gates green; exact bot head checks/review pending | [#3460](https://github.com/amruthpillai/reactive-resume/pull/3460) | independently review exact bot head and hosted comments/checks; keep unmerged | real recovery still needs verified owner, snapshot, mapping, private delivery |
+| 02 hosted v4 recovery | #3181, #2760 | published; autofix/hosted review queued | queued `task_796f15a35422` | `codex/issue-3181-recovery-procedure` | `7a98f6662` → reviewed `4125074f9`; bot head `6c4743935` | #2760 identity branch depends on 01 evidence | bot removed two unused internal type exports; four hosted threads include likely valid invisible-format ID gap plus scanner complexity/canonical-strictness challenges | pre-bot 59 tooling, 54 API, 21 auth plus all gates green; exact bot head E2E/review active | [#3460](https://github.com/amruthpillai/reactive-resume/pull/3460) | independently adjudicate all four threads, fix proven gaps, re-review, reply/resolve; keep unmerged | real recovery still needs verified owner, snapshot, mapping, private delivery |
 | 03 MCP registration | #3398, #3153 | no-change | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | coordinate DB/startup with 05 | merged #3421 (`fe9b59e`) present on main; current schema/startup/auth contracts match plan | #3421 hosted checks successful; audit auth/server/API/DB tests, typechecks, boundaries passed | #3421 merged before run | deployment verification only | deployed digest/log correlation and exact Codex/Claude DCR/consent/PKCE/MCP retest unavailable |
 | 04 AI provider compatibility | #2732, #2766, #2723, #2708 | blocked | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | serialize edits to AI service | zero drift; historical #2708 Responses path and #2766 structured Test path absent; remaining tuples differ | focused API 96 and full API suites/typecheck/boundaries passed in audit | — | select wire/state/import/base-path unit only after exact current tuple fails | provider/model/base URL/path/version/action/error tuple and allowed endpoint unavailable |
 | 05 AI provider migrations | #3152 | blocked | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | coordinate DB/startup with 03 | zero drift; table schema, migration, startup ordering, Docker copy path coherent; `42P01` historical cause unresolved | audit API/server/DB tests, typechecks, boundaries passed; no real PostgreSQL migration fixture | — | choose config/packaging/startup/migration repair only after disposable reproduction | affected image layout/digest, working directory, DB schema/search path/journal, fresh+upgrade DB fixture |
@@ -95,7 +95,7 @@ state changes are outside scope.
 | Plan 02 final independent review | `task_5b02aa026038` / `ctx_d16058d89c7c` | same Plan 02 worktree | complete; changes required; worker released | P1 duplicate-member safety bypass; P2 whitespace/control-only manifest identifiers |
 | Plan 02 hardening round 4 | `task_5b56f07b5a2c` / `ctx_e7c63529b719` | same Plan 02 worktree | complete; worker released | commit `4125074f9`; 59 comparator tests plus duplicate-member and unsafe-ID adversarial gates green |
 | Plan 02 independent review round 5 | `task_a2b0562df7aa` / `ctx_bc5056c8978c` | same Plan 02 worktree | complete; no findings; pushed; worker released | exact head `4125074f9`; full diff, 54 independent assertions, fresh coordinator verification, PR #3460 |
-| Plan 02 autofix review | `task_796f15a35422` / queued | same Plan 02 worktree | ready | inspect exact bot head `6c4743935`, public type surface, full gates and hosted state |
+| Plan 02 autofix review | `task_796f15a35422` / queued | same Plan 02 worktree | ready | inspect exact bot head `6c4743935`, public type surface, four hosted threads, full gates and publication disposition |
 | Plan 09 re-review | `task_1bd82b008a77` / `ctx_ca2a0176b52f` | same Plan 09 worktree | complete; no findings; worker released | full diff and both factual corrections verified before PR #3458 |
 | Plan 09 hosted review follow-up | `task_a44e374822b4` / `ctx_89e6769df19d` | same Plan 09 worktree | complete; changes required; worker released | selected revision prints correctly but no importable file is created |
 | Plan 09 hosted review fix round 2 | `task_8605c30ca032` / `ctx_2e0aa7be1312` | same Plan 09 worktree | complete; worker released | commit `9dd218ba1`; non-destructive recovered-file command plus synthetic proof |