R-50: A4 fresh-provision validated (agent auto-net1 live); spike caveat closed

- A4: scratch guest provisioned from golden on the island-configured drill came
  up with net1 automatically (zero manual edits) — the v0.96.0 provisioning path
  proven live. Spike method caveat CLOSED.
- REPORT: Phase A done + vouched 0.96.0; B0/B1/A4 done; B2/B3 await operator go.

documentation/audits/SPIKE-island-bridge-2026-07-25.md

@@ -18,13 +18,15 @@ confirmed live AND its fix proven, and the whole topology survives a cold host r
 See **“## Empirical validation (2026-07-25 PM) — probes P1–P8”** below. The two earlier BLOCKED attempts
 (no drill existed) are retained further down for provenance.
 
-### Method caveat (honest scope)
-The probes drove the mechanism via **manual, surgical config edits** on the drill (append a `vmbr9`
-stanza + `ifreload`, `pct set -net1`, hand-edit `agent.json` `listen_addr`/`lan_resolver.host_ip` and
-the host-side `bootstrap.json` endpoint, restart). They prove the **runtime chain** is sound and
-reboot-durable. They do **not** exercise the *provisioning* path that a real rollout needs
-(`felhom-host-install.sh` writing these at install/golden-bake time) — that is Phase A of the impl spec,
-still a future task. What is now de-risked: every assumption the spec rests on is empirically true.
+### Method caveat (honest scope) — **CLOSED 2026-07-25 by the implementation.**
+The probes drove the mechanism via **manual, surgical config edits** on the drill. That caveat is now
+**resolved**: R-50 shipped (agent **v0.96.0** — `buildBringUpConfig` attaches the island `net1` from
+`local_api.island_bridge`/`island_guest_addr`; host-install **v1.19.0** creates `vmbr9`, writes the
+island bind + `island_*` + the `lan_resolver.host_ip` LAN pin). The *provisioning* path is now proven
+live, not just the runtime: (a) the migration runbook ran verbatim on the drill (`RUNBOOK-island-migration.md`,
+B1); and (b) a scratch guest provisioned by the agent from the golden came up with `net1` on the island
+**automatically, zero manual edits** (A4). Fleet migration of the two demo boxes remains (Phase B, operator
+go/no-go). See `felhom-agent/CHANGELOG.md` v0.96.0 + `scripts/CHANGELOG.md` v1.19.0.
 
 ## Empirical validation (2026-07-25 PM) — probes P1–P8, ALL PASS