docs: queue plan 09 final rereview

docs/execution/approved-issue-plans-ledger.md

@@ -41,7 +41,7 @@ state changes are outside scope.
 | 06 image storage delivery | #2684, #2778 | blocked | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | coordinate 12/15/25 renderer/image fixtures | #2684 ACL cause fixed by merged #3432 (`35cecf9`); #2778 Browserless path obsolete; current topology unproved | #3432 hosted checks successful; audit storage/upload/PDF tests, typechecks, boundaries passed | #3432 merged before run | deployment retest plus shared real-encoding/backend/render fixture before repair | deployed digest; disposable S3/Garage/SeaweedFS/MinIO/proxy and browser/server raster matrix unavailable |
 | 07 AIO deployment | #2722 | published | implementation/review chain complete | `codex/issue-2722-postgres-docs` | `7a98f6662` → `a7b8c4cc5` | none | hosted review corrections distinguish image/build paths, pin quickstart PostgreSQL 17, warn on host ports, require verified cross-host TLS; five comments fixed, one rejected with evidence | Compose dry-runs, disposable PostgreSQL 17.11 migrations, Markdown/link/diff/scope and all hosted checks green; approved; zero unresolved threads | [#3457](https://github.com/amruthpillai/reactive-resume/pull/3457) | keep unmerged; monitor only | no AIO implementation; optional Unraid host smoke unavailable |
 | 08 root public resume | #2669 | plan amendment required before implementation | audit `task_9f27829ca50f` | planned `codex/issue-2669-root-resume` | `7a98f6662` → — | none | current password redirect rejects `/`; public view is slug-hook-bound; SSR canonical cannot import server env; expanded auth/canonical contract identified | audit focused API/web suites, typechecks, boundaries passed | — | amend ownership for identity-vs-return auth flow and server-derived canonical root, then dispatch coherent feature | engineering scope correction; feature remains narrower than arbitrary domain/TLS registry |
-| 09 external version backup | #2705 | published; hosted correction fix active | fix `task_9e6fdbe67fb7` / `ctx_9087e895192f` | `codex/issue-2705-git-backup-docs` | `7a98f6662` → published `6931d2cc4`; local `9dd218ba1` | none | selected commit lookup plus explicit recovered-file creation committed; final review found fixed output filename can overwrite an earlier recovery | 152 focused tests plus Markdown/commands/link/diff/scope green before low-severity finding | [#3458](https://github.com/amruthpillai/reactive-resume/pull/3458) | require unused output filename, reverify, independently rereview, then push and resolve duplicate threads | DB integration/E2E unavailable; no sync/remote/whole-account restore |
+| 09 external version backup | #2705 | published; hosted correction under final rereview | review `task_4af7ea4cfb3f` / `ctx_98b5a07f33d4` | `codex/issue-2705-git-backup-docs` | `7a98f6662` → published `6931d2cc4`; local `4ffdd96bd` | none | command-site prose now requires fresh/unused output filename; sentinel preservation and import-as-new recovery proved | 152 focused tests plus Markdown/commands/link/diff/scope green after fix; independent rereview active | [#3458](https://github.com/amruthpillai/reactive-resume/pull/3458) | clean rereview, push corrected head, resolve duplicate threads | DB integration/E2E unavailable; no sync/remote/whole-account restore |
 | 10 legacy link routing | #2836 | pending implementation after brief correction | audit `task_9f27829ca50f` | planned `codex/issue-2836-retired-slug-notices` | `7a98f6662` → — | none | prospective same-username slug-attempt notice remains coherent; exact DB/API/UI/E2E owner set verified | audit focused API/web suites, DB/API/web typechecks, boundaries passed | — | correct final E2E target to `public-sharing.spec.ts`, then implement migration/API/owner UI atomically | historical cause absent; no redirects/emails/recovery; prospective partial coverage only |
 | 11 job search policy | #3010 | published | implementation/review chain complete | `codex/issue-3010-jsearch-docs` | `7a98f6662` → `1d0397884` | none | two valid wording comments fixed; independent full-diff re-review found no issues; replies carry commit evidence | 52 focused tests plus Markdown/link/diff/base/scope and all exact-head hosted checks green; approved; zero unresolved threads | [#3459](https://github.com/amruthpillai/reactive-resume/pull/3459) | keep unmerged; monitor only | real provider/browser optional gate unavailable; removal motive unknown |
 | 12 preview/export failures | #3323, #3290, #3033, #3007, #2609 | blocked corrective work; diagnostic-ready | audit `task_1c6582ccdeae` | `codex-audit-rendering-12-19` | `7a98f6662` → no source change | renderer ownership; share observation harness with 18 | zero drift; staged-preview/error-boundary baselines remain; reports cross persistence/font/PDF/viewer/deployment boundaries | audit focused web/PDF suites, affected typechecks, boundaries, build passed | — | isolate PT Sans, browser/config, and template-selection boundaries; no shared fix | exact JSON/output/browser/config/current reproduction missing |
@@ -98,7 +98,8 @@ state changes are outside scope.
 | Plan 09 hosted review follow-up | `task_a44e374822b4` / `ctx_89e6769df19d` | same Plan 09 worktree | complete; changes required; worker released | selected revision prints correctly but no importable file is created |
 | Plan 09 hosted review fix round 2 | `task_8605c30ca032` / `ctx_2e0aa7be1312` | same Plan 09 worktree | complete; worker released | commit `9dd218ba1`; non-destructive recovered-file command plus synthetic proof |
 | Plan 09 final hosted re-review | `task_435249ae4c23` / `ctx_5fd78d0eeccd` | same Plan 09 worktree | complete; changes required; worker released | low: fixed `recovered-resume.json` name silently overwrites an existing local recovery file |
-| Plan 09 review fix round 3 | `task_9e6fdbe67fb7` / `ctx_9087e895192f` | same Plan 09 worktree | implementing | require fresh/unused recovery output filename, rerun focused recovery and documentation gates, commit without push |
+| Plan 09 review fix round 3 | `task_9e6fdbe67fb7` / `ctx_9087e895192f` | same Plan 09 worktree | complete; worker released | commit `4ffdd96bd`; require unused output filename, preserve existing sentinel, 152 tests and docs gates green |
+| Plan 09 rereview round 4 | `task_4af7ea4cfb3f` / `ctx_98b5a07f33d4` | same Plan 09 worktree | reviewing | full diff plus fresh/unused-output recovery workflow and all prior findings |
 | Plan 11 independent review | `task_7d5d4c1417a9` / `ctx_17ee05faf9e7` | same Plan 11 worktree | complete; changes required | attachment-format overclaim and duplicated patch/restore guidance |
 | Plan 11 review fix | `task_351a96e90b69` / `ctx_e398c9128731` | same Plan 11 worktree | complete; worker released | commit `e05977007`; attachment promise removed and adjacent guidance deduplicated |
 | Plan 11 re-review | `task_86a66b578544` / `ctx_3bb8017e8676` | same Plan 11 worktree | complete; no findings; worker released | exact head `e05977007`; 52 focused tests and full diff verified before PR #3459 |

docs/execution/briefs/rereview-plan-09-round4.md

@@ -0,0 +1,19 @@
+# Independent rereview: Plan 09 round 4
+
+Review only. Assigned worktree:
+`/Users/amruth/orca/workspaces/reactive-resume/issue-2705-git-backup-docs`.
+
+Target local head: `4ffdd96bdda668513e26051a52c971d546e01bff`.
+PR #3458 remote head remains older. Do not edit tracked files, commit, push, resolve threads, or merge.
+
+Read current instructions, pinned approved Plan 09, full `origin/main...HEAD` diff, implementation/fix reports, and every
+prior review report. Revalidate current `origin/main`, live issue #2705, PR #3458, checks, and unresolved threads.
+
+Primary acceptance: revised recovery prose must require a fresh/unused output filename at command site; following it must
+preserve an existing sentinel output, create a valid importable earlier revision under a distinct name, and leave tracked
+`resume.json` unchanged. Confirm all prior factual corrections and all nine approved commands remain coherent.
+
+Run 152 focused tests, disposable two-revision recovery workflow, Markdown/link/command/forbidden-command/diff/scope
+gates. Review complete diff for standards and approved-plan compliance. Report findings first with severity and anchors.
+Write `.orchestration/plan-09-rereview-round4.md`, then send worker_done with publication verdict. No subagents.
+