docs: record bounded keyboard-focus release truth

[daliu]

Closes #659

Outcome

Records the verified final production truth for WEB-002D after exact publication and fail-closed repause. This pull request changes documentation and release-regression assertions only; it carries no publication authority and cannot replace the live artifact while the manifest remains inactive.

Officer impact: The reviewed visible-focus, deterministic phone-menu, and client-side route-focus behavior is live on the public site. The optional profile-photo/searchability and officer People-finder interface remains inert and disconnected. Officers gain a completed no-terminal audit record; no officer account, provider, Firebase, or data action is required.

Officer documentation: OFFICER_START_HERE.md, docs/officers/README.md, docs/officers/ACCESS_CONTINUITY.md, docs/officers/EVENTS_SHOP_MEMBERS.md, docs/officers/PUBLISH_AND_CHECK.md, docs/officers/REQUEST_A_CHANGE.md, docs/officers/SYSTEM_MAPS.md, and docs/officers/UPDATE_PUBLIC_CONTENT.md.

Deployment evidence: Netlify deploy 6a7ece87c5ca4d0007c1a3fc is ready and published from exact release merge 46e23647d8e0bf9fa3a574ea5c5f993be10a419d, source 7496fe0881fb52908c4ff2f40f488df09c94c908, tree ccac4c189c195db8ab594e0eefe256ea9fa04996, 62 files, and digest e4c26e6f0fbcd086663d86238675f0be228fb649a00628c1c97d1166612f49c7. Exact-main CI run 31783141914 passed all five jobs. All 62 downloaded production files matched the pinned artifact byte-for-byte. Signed-out 1280×900 /shop and 390×844 /events checks confirmed route focus, truthful phone-menu closure, scroll 0/0, and no horizontal overflow; the record explicitly does not claim a retained screenshot or separate live keyboard :focus-visible observation. Repause merge 3138a00c1c48e1d5d1dcda0b44722b09a2194ff7 passed exact-main CI run 31783808994; Netlify attempt 6a7ed0ddb00a46000818878d remained unpublished, and the published deploy/marker/artifact stayed unchanged. The manifest is inactive; temporary source/control/repause refs are absent; rollback ref codex/netlify-source-659-rollback remains pinned to c2d87d1f69f15e128a0bc9b1b9f915b7c8417aec. Exact-head CI run 31786111839 for this documentation-only PR passed all five jobs. Netlify Deploy Preview 6a7ed8a73a3b8200080d8257 was ready at exact head 2dfff90358fb141b90939690c5e0cd7a512828a5, review 662, context deploy-preview, and published_at:null; provider metadata reported no Functions and no edge functions. Final-truth merge 230d73894a69c3f5f5fda05e319fb7b9d63e3d69 has tree 3d56c106b477cb8ae0ff2c6cbd4c92167a5f98b0 and exact parents 3138a00c1c48e1d5d1dcda0b44722b09a2194ff7 and 2dfff90358fb141b90939690c5e0cd7a512828a5. Exact-main CI run 31786522616 passed all five jobs. Netlify production attempt 6a7eda04482e7e000708f9ba failed closed at the exact merge with published_at:null and no deploy time. Provider and public-marker readback retained production deploy 6a7ece87c5ca4d0007c1a3fc and the exact 62-file WEB-002D artifact. No Firebase, Rules, Functions, indexes, provider configuration, accounts/sign-in, production data, payments, DNS, or connected directory behavior changed.

Exact final-truth change

• Head 2dfff90358fb141b90939690c5e0cd7a512828a5
• Tree 3d56c106b477cb8ae0ff2c6cbd4c92167a5f98b0
• Sole parent / required first parent 3138a00c1c48e1d5d1dcda0b44722b09a2194ff7
• Exact 14 paths; 174 additions / 208 deletions
• Binary diff SHA-256 a7b5ac0c7151e13bfce90df10132cfe5958ea5d32256a6f8213f27ffc03e2f2c
• Release implementation, manifest, netlify.toml, packages, workflows, backend, and availability source are byte-unchanged

Verification

• node --test tests/release-workflow.test.js — 14/14
• Root release/security/SPA subset — 105/105
• git diff --check — pass
• Independent final-truth review — GO at exact diff a7b5ac0...
• Stale WEB-002D — Publish the bounded keyboard-navigation and SPA-focus chain #659 pending/not-published wording is mutation-sensitively rejected
• Historical WEB-002C — Publish the bounded inert member-directory interface preview #623 and WEB-002A — Publish bounded Shop and Events permissions containment #473 release/rollback chains remain asserted
• Active OAUTH-001A2L — Bound Strava activity/statistics JSON and cancel the unread statistics body #616 Strava blobs and RISK-024 line remain exact
• Directory availability remains literal false; MEMBERS-DIRECTORY-001C — Release and verify the opt-in officer photo directory #507 retains every connected-directory gate

The exact final-truth merge published nothing. Production remains deploy 6a7ece87c5ca4d0007c1a3fc with the exact marker and artifact, and the release manifest remains inactive.

[netlify]

✅ Deploy Preview for luminous-fox-7c393f ready!

Name	Link
🔨 Latest commit	2dfff90
🔍 Latest deploy log	https://app.netlify.com/projects/luminous-fox-7c393f/deploys/6a7ed8a73a3b8200080d8257
😎 Deploy Preview	https://deploy-preview-662--luminous-fox-7c393f.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.