code-to10 v5: solidify 7 provisional resolutions per user confirmation (2026-11-02)

- whitelist expansion (tr + exit builtin) confirmed, comment only
- B4 viewport wording: temp banner removed, wording untouched,
  change-list table stays in draft, not merged into body
- B3-tail (a)/(b): no content change (bullet still absent), recorded
  as decided; v2 record showed it unselected, no side picked here
- section 4: 6 templates/artifacts/ refs deleted per signed verdict;
  tripwire test updated 6 -> 0 to pin the new inventory
- CHANGELOG pointer line kept, no marker present
- workers audit landing migration confirmed, comment only
- verify-script gate evidence confirmed, gate hard untouched
- 2 temp stances NOT touched: actual-only quota, evidence binding
  not enforced / no anti-restamp
- behavior code unchanged; directional skill tests 39/39 OK

deploy/verify-multiuser.py

@@ -184,12 +184,9 @@ def main():
         finally:
             conn.close()
         if len(created_task_ids) >= 1:
-            # 临时消解（v2 provisional，待用户确认后才算定）：#240 硬门禁 ×
-            # #263 验证脚本——本轮临时选“验证脚本补门禁证据”一边，
-            # 门禁默认 hard 一字不动。另一边（门禁给验证场景开口子）
-            # 的代价是硬门禁出现调用方可走的例外路径，fail-closed
-            # 语义即被开口；若用户最终选开口子一边，本处证据须随
-            # 门禁语义重定，不可两边同时要。
+            # 已确认（v5 用户定稿 2026-11-02）：#240 硬门禁 × #263 验证
+            # 脚本——定稿选“验证脚本补门禁证据”一边，门禁默认 hard
+            # 一字不动。另一边（门禁给验证场景开口子）未选。
             # 证据说明（合成任务的真实值，不是编造的通过凭证）：
             # 合成任务未跑模型、未改任何仓库文件，故 files_changed
             # 为空清单；owned_dir 沿用既定测试口径的拥有目录写法，