chore(sprint): archive S6 — protect & instrument the paper run

SPRINT.md

@@ -10,6 +10,29 @@
 
 ## Sprint Archive
 
+### S6: Protect & Instrument the Paper-Validation Run
+
+<!-- sizing: 7-8 -->
+**Completed:** 2026-06-11 | **Status:** complete | **Final main HEAD:** 55921a6
+**Goal:** Protect and instrument the live paper-validation run — close the income-sleeve wiring gap before the July 1 reinvest firing (owner-gated, recommendation-only by default), automate the host-boot and dead-man blind spots, and clear doc/repo hygiene — with zero changes to deterministic trading rules, risk parameters, or run posture.
+
+**Outcome:** 7/7 items completed and merged to main (PRs #98–#104, all CI-gated, merge-commit). Test suite 590 → 632 passing (0 failed), +42 tests. **Zero rework, zero blocked, zero scope changes** — and the fastest sprint yet: plan approved 2026-06-10, all 7 merged by 06:56 PT 2026-06-11 (~12.5 h wall-clock). Strict TDD per item; executors ran in worktree isolation. First sprint with `.sprint-metrics.json` emission (S6-005) — phase timing captured from EXECUTE onward (PLAN/SPEC events missing; early events backfilled after a jq WSL-PATH fix that S6-005's own advisory surfaced); review-finding counters not yet wired (S7 chore). S6-001 (sprint centerpiece, deadline 2026-07-01) merged 20 days early; its primary invariant — reinvest flag off ⇒ IExecutionService never called — proven against the real IncomeSleeveManager. S6-002's host-boot CI gate (the S5-004r blind-spot fix) ran on both subsequent src PRs (#100, #101) and passed — live and self-proven within the sprint. Five of seven items took a single review-fix cycle each (S6-005 `922e46b`, S6-002 `b7170f3`, S6-001 `6fa381e`, S6-003 `c1b7983`, S6-004 `05fe512`) — all polish/docs-level, none correctness; S6-007/S6-006 merged clean. The judge rejected three lens findings as factually wrong (S6-002 A1, S6-003 A1, S6-006 U4 — single-layer reads), blocking pointless fix cycles. One session-limit interruption (S6-006 lens pass) re-spawned cleanly; two pipeliner background-CI-watch stalls were finished inline by the orchestrator. Post-merge validation: live host restarted onto merged code (all 4 timers register, no TypeLoadException, PID-stable), TradingSystem-GapDayMonitor task registered, preflight run (TWS FAIL = human-owned login, data-dir FAIL = self-resolving day-1 state), Check-DailySnapshot -WhatIf exit 3 correct. Sprint goal met: the 12-week paper run enters day 1 (2026-06-11) instrumented — dead-man monitor armed, host-boot gated in CI, reinvest path wired and owner-gated.
+
+| ID | Title | Type | Risk | PR | Outcome |
+|----|-------|------|------|-----|---------|
+| S6-001 | Wire IncomeSleeve_MonthlyReinvest timer to IncomeSleeveManager — recommendation-only default, order placement behind owner flag (OFF) | feature | ⚠ | #101 | merged, pass |
+| S6-002 | Automated host-boot smoke test in CI — worker boots, 4 functions register, no TypeLoadException | test | - | #99 | merged, pass |
+| S6-003 | Runbook + ADR-031 reconciliation — all 4 timers documented, App-Insights triage refs fixed | docs | - | #102 | merged, n/a |
+| S6-004 | Dead-man gap-day monitor + preflight.ps1 — PowerShell scheduled task, Discord alert on missing EOD snapshot | feature | ⚠ | #103 | merged, pass |
+| S6-005 | Repo housekeeping — commit untracked docs, gitignore .vscode/, emit .sprint-metrics.json | chore | - | #98 | merged, n/a |
+| S6-006 | DECISIONS.md / roadmap state refresh — stale snapshot, resolved blockers | docs | - | #104 | merged, n/a |
+| S6-007 | Quarterly-audit stub honesty — stop logging "complete" for a no-op | fix | - | #100 | merged, pass |
+
+**Decisions logged:** ADR-031 amended (S6-003) — corrected from "two NCRONTAB timers" to all four; a missed monthly-reinvest firing is a tolerated gap day, not an incident; quarterly-audit stub produces an honest Warning and nothing else (S6-007). KD-007 logged (S6-001 judge deferral, recorded by S6-006) — optional-null ctor dependency pattern, decide once portfolio-wide. DECISIONS.md Project State Snapshot refreshed (S6-006): Phase 3 live since 2026-06-11, 632 tests, both 2026-04-07 blockers cleared. Locked human decisions at plan approval: S6-001 touches the trading path mid-run ONLY recommendation-only (plan + Discord report, no orders), order placement behind a new owner flag defaulting OFF, income sleeve's PDR-004 clock starts at its first actual trade; S6-004 = PowerShell scheduled task with webhook from gitignored local.settings.json; S6-002 host-boot smoke in CI; .vscode/ gitignored, not committed; deferrals confirmed — KD-005/KD-006 (upstream still blocked, Worker AI 2.51.0), quarterly-audit full impl (S7+), B-001/B-002/B-003 (gated per ADR-030).
+**Debt closed:** All four S5-surfaced process items — the host-boot blind spot is now a structural CI gate, no longer a checklist (S6-002); the quarterly-audit stub no longer logs a false "complete" (S6-007); stale DECISIONS.md snapshot and cleared blockers reconciled (S6-006); untracked S5 docs committed and sprint-metrics emission wired (S6-005).
+**Debt surfaced (deferred, not lost):** KD-007 — optional-null ctor dependency pattern (S6-001 judge deferral; S6-002's gate partially mitigates accidental de-registration). Metrics instrumentation gaps — reviewFindings/reworkCount counters never incremented, completedAt/totals not finalized at COMPLETE, PLAN/SPEC events not emitted (S7 chore). Backlog candidates: S6-002 grep hardening, build-artifact reuse, failure-class prefixes; S6-004 Format-Table polish, WARN count, embed copy ordering; S6-001 defence-in-depth exception wrapper, alert-gate consolidation.
+**Next-sprint sizing:** 7–8 items (recommend 8). All items completed with zero rework/blocked → same-or-+1 off a clean 7. S5's hold-at-7 rationale has dissolved: the host-boot gate is automated CI (no per-item overhead) and S6 cleared 7 items in ~12.5 h wall-clock with capacity to spare. Go 8 if the mix is ≤2 ⚠-risk items (quarterly-audit impl + KD-007 decision + S6 backlog candidates fit); hold at 7 if S7 pulls ≥2 ⚠ items or anything touching the live run's trading path — the paper run's daily monitoring is now a standing tax (ADR-031) and the 5/7 review-fix cycle rate still costs pipeline wall-clock.
+
 ### S5: Start the Paper-Validation Run — EOD orchestration, ops wiring, runbook
 
 <!-- sizing: 7-8 -->