docs(pilot): GL-5 shipped — G8 flip + GL-4 status housekeeping + decision log

G8 -> implemented + scratch-DR live-validated (agent v0.75.0 b3446213);
G6 -> implemented-awaiting-GL-6; G1 key-pin plumbing -> done (ceremony
pending); manifest-bump guidance updated: publish + vouch 0.75.0 (0.74.0
ships broken guest-loss DR). Two live-discovered PVE restore rules recorded.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

CONTEXT.md

@@ -3,6 +3,20 @@
 > Created with the REUSE.md rollout (2026-07-03). Authoritative history: `hub/CHANGELOG.md` (hub),
 > `website/CHANGELOG.md`, `scripts/CHANGELOG.md`; end-of-task detail in `REPORT.md`.
 
+- **2026-07-08 — TASK GL-5 SHIPPED: DR bring-up bind overrides (agent v0.75.0, LIVE + scratch-DR
+  validated)** — go-live G8; docs-only here (GO-LIVE-PACKAGE G8/G6/G1 flips + decision log; the
+  code + full report live in felhom-agent `b3446213`). Guest-loss DR restore WORKS now: the two
+  structural binds (mp8/mp9) are overridden with throwaways at restore and swapped for the REAL
+  binds pre-start (root pct via the new Engine HostRunner seam), displaced unusedN deleted. TWO
+  live-discovered PVE rules beyond the spike: explicit-params restore needs an explicit rootfs AND
+  silently DROPS unlisted mountpoints — the full param set now derives from the archive's embedded
+  config (`ExtractArchiveConfig`, 200 under the scoped token). Live proof: scratch 9310 from a real
+  9201 archive — mp0 200G + mp1 50G restored WITH content (7m23s), real binds, zero residue, clean
+  teardown; the same op failed outright on v0.74.0. OPERATOR: **publish agent 0.75.0 + bump the
+  manifest to it** (vouching 0.74.0 ships broken DR). Follow-ups: restore-test boot-verifies
+  without mp0/mp1 (same PVE rule, reverse direction — candidate reuse of drRestoreOverrides);
+  DR-selftest KeepMAC duplicates a live source's MAC briefly; no host-loss DR runbook exists yet
+  (GL-6/S5 writes it).
 - **2026-07-08 — TASK GL-4 SHIPPED: uninstaller gap-closure + operator-key day-0 fold
   (host-install v1.11.0)** — go-live G6 + the G1 key-pin follow-up; **awaiting GL-6** for the real
   (non-dry) teardown + armed-pin install. Uninstall now removes the self-update artifacts (4b4: