docs(pilot): GL-6 — F4 fixed (v1.11.3) + live-proven; drill record

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

documentation/pilot/DRILL-GL6-2026-07-08.md

@@ -166,6 +166,24 @@ Command (Viktor typed the `demo-felhom` hostname ack — interactive consent leg
   mounts survived uninstall #1; on this reinstall the parent bind `/mnt/felhom-drives` is back but the
   drives are NOT yet bound under it — re-enrollment is the Phase-2b UI leg.
 
-## Gate 2 — [Viktor]: <pending — interactive bring-to-life legs below>
+### F4 fixed mid-drill (Viktor: HOLD → fix now) — host-install v1.11.3 (`98bf5a43`)
+
+Root cause confirmed: `should_skip X || step_X` fully skips a completed step on `--resume`, but
+token/enroll/grows are PRODUCERS whose in-memory outputs later steps consume; `step_token` even had
+an internal resume-guard the `|| step_token` dispatch DEFEATED. Fix: token/enroll/grows run every
+pass (all idempotent — reuse-or-rotate / mint-once-reuse POST / pure recompute); golden's
+`GOLDEN_VOLID` re-derived from the local archive in the resume block. Harness +GL6-F4 invariant,
+27/27, shellcheck clean.
+
+**Live proof (v1.11.3, crafted `--resume --dry-run` on felhom-pve, throwaway `FELHOM_INSTALL_STATE_DIR`,
+zero mutations):** marks = the exact pre-crash set `[preflight,token,grows,enroll]` (agent_config
+NOT done). Transcript: steps **2/8 token, 3/8 grows, 4/8 enroll all RE-RUN**; the agent_config write
+shows **`host_id=<dry-run-host-id>` (non-empty)** and provision shows **`-rootfs-grow 0 -datavol-grow
+184 -sysdata-grow 42`** — both the exact values that were empty (→ crash-loop / flag parse error)
+pre-fix. Real 9201 + its state.json untouched (verified: daemon active, controller Up healthy).
+**GL6-F4 CLOSED + live-validated.** (GL6-F3 stays a GL-7 command requirement `--allow-new-leaf`;
+guard-narrowing to `felhom_guests` recorded as a candidate. GL6-F1/F2 remain v1.11.x candidates.)
+
+## Gate 2 — [Viktor]: <pending — F4 fixed + proven; interactive 2b bring-to-life next (CC via browser)>
 
 *(Phases 3–6 appended as they run.)*