docs(pilot): GL-6 Phase 5 PASS — clean byo exit, data intact 2nd time

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

documentation/pilot/DRILL-GL6-2026-07-08.md

@@ -283,6 +283,24 @@ armed-from-first-boot), the operator-signed self-update path is fully live-valid
   healthy. (Also incidentally re-proved the v1.11.3 F4 fix: the `--resume` re-ran token/enroll/grows
   cleanly and reached verify — no crash-loop, no flag error.)
 
-## Gate 4 — [Viktor]: <pending>
+## Gate 4 — [Viktor]: **GO** — drift-heal proven (C7 live, F7 recorded, repaired).
+
+## Phase 5 — uninstall #2 (the byo box's clean exit) — PASS
+
+Real `--uninstall --vmid 9201` (typed confirm), no busy prop this time.
+- `felhom-usb` unmounted cleanly ("data stays on the drive"); statement reads **"the drives are
+  physically removable now"** (no busy exception this run) — the KEPT-vs-WIPED statement printed as
+  designed; UNINSTALL complete.
+- **Host audit CLEAN:** no felhom-agent unit/user/binary/selfupdate-wrapper/A-B-slots/rollback-unit/
+  limits-drop-in/watchdog/mkfs-wrapper/hook-snippet/dnsmasq-drop-ins; pveum user 0, roles empty,
+  felhom pool gone; `/var/lib/felhom-agent`, `/var/lib/felhom-install`, `/etc/felhom-agent` all gone.
+  (F1 did NOT recur — this install's config had no `.bak` siblings.)
+- **Drive DATA intact:** witness `7b00bc35…` == Phase-0 (the data-sovereignty exit, proven a 2nd time).
+- Recurring known findings: **F2** (per-drive `mnt-*.mount` units survive), **F6** (leftover dnsmasq
+  still active). Trivial demo-box note: 6 ancient `felhom-agent.v0.1x.0.bak` binaries (Jun 10–11,
+  legacy naming) survive the `.bak-*` glob — historical cruft, not on a real customer box; a fix
+  could widen the glob to `.v*.bak`.
+
+## Gate 5 — [Viktor]: <pending>
 
 *(Phases 3–6 appended as they run.)*