docs: v0.89.0 live legs PROVEN — Scenario 4 A/B train, Scenario 1 R-22 self-heal (~3s), Scenario 3 poke→tick (~31ms)

CONTEXT.md

@@ -14,10 +14,12 @@
   restart. (3) **agent-plane poke listener (Direction-2a)** — `internal/poke`: contentless UDP poke
   bound to the box WG /32 (port **51822**), leading-edge debounced, fires the hub-loop out-of-band
   trigger for an immediate desired-state cycle; enabled with `wg_tunnel.enabled`; first slice of
-  R-13. Red-proofs for all three (run-fail-revert). **OPEN: operator vouch of 0.89.0 in the Day-0
-  manifest + MinAgent floor raise → the floor-driven train updates the demo (still 0.88.0) → THEN
-  the Scenario 1 (R-22 self-heal, rollback re-grant recorded) + Scenario 3 (poke save-to-tick)
-  live legs run.** The ep0 poke leg is already validated live (hub REPORT). Details: REPORT.md.
+  R-13. Red-proofs for all three (run-fail-revert). **ALL THREE LIVE LEGS PROVEN on the demo
+  (2026-07-17), demo now LIVE on 0.89.0:** Scenario 4 floor-driven A/B train 0.88→0.89 (operator
+  signed+enqueued the `agent_update` op — the vouch+floor alone does NOT trigger it; committed, no
+  rollback); Scenario 1 R-22 self-heal (marker aside + ACLs revoked → `pre-check 403 … self-granting
+  (R-22)` → `converged state=adopted` in ~3 s, ACLs restored, offsite active); Scenario 3 poke→tick
+  ~31 ms ep0→box + immediate report cycle (save→tick ≈ ~0.45 s). Details: REPORT.md.
 
 - **v0.88.0** (2026-07-13 eve) — **controller-driven escrow ceremony (agent half), LIVE on demo
   host + drill VM (63/63 capabilities both).** `--output=json` machine mode (text mode