docs(spec/19): §F.3 multi-device completeness dogfood runbook

[Reederey87]

Summary

Records the live-R2 dogfood that closed the multi-device completeness wave (PRs #130–#132) as spec/19 §F.3, in the §F.1/§F.2 log convention:

• ENV-SYNC-01: capture on A (3 recipients) → env.profile.updated + blob over the hub → byte-identical hydrate on B; zero commands beyond the killer loop.
• TRUST-01: A revokes B → C shows B revoked with no local operator action; B epoch-wedges; B's rogue post-revocation push quarantines loudly on C.
• Bug caught by the run (the reason §F exists): the superseding rewrap event wiped needs_rotation fleet-wide; fixed in PR feat(devices): synced device-trust propagation (TRUST-01) #132; the fixed-binary re-run proves the warning propagates and survives.
• Traps: workspace-bound git-carrier marker, hub init git-only bootstrap, count-not-label doctor assertions, pairing-before-capture ordering.

Docs-only (spec/19 + spec/18 work log); single-reviewer per convention. Completes the wave — code follow-ups tracked in #133/#134.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Documentation
  • Added a new validated multi-device runbook entry covering environment sync and trust propagation.
  • Documented real-world pairing and capture ordering, cross-device hydration consistency, revocation and quarantine behavior, rotation-warning propagation, and a recent rotation-related fix.
  • Included new operational notes and traps for hub/workspace setup and device bootstrap behavior.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3303f17a-ff8c-4c68-922a-c3d7b51e7151

📥 Commits

Reviewing files that changed from the base of the PR and between c49e090 and 3ac4e9a.

📒 Files selected for processing (2)

• spec/18_WORK_LOG.md
• spec/19_CLOUD_PROVISIONING_GUIDE.md

---

📝 Walkthrough

Walkthrough

This PR adds documentation entries: a new dated work-log entry in spec/18_WORK_LOG.md and a corresponding "F.3" subsection in spec/19_CLOUD_PROVISIONING_GUIDE.md, both describing a multi-device ENV-SYNC-01 + TRUST-01 dogfood validation run, including revocation, rotation, and a fix reference.

Changes

Documentation updates for F.3 dogfood wave

Layer / File(s)	Summary
F.3 dogfood wave entries spec/19_CLOUD_PROVISIONING_GUIDE.md, spec/18_WORK_LOG.md	Adds a new F.3 subsection documenting a live multi-device ENV-SYNC-01/TRUST-01 dogfood run (pairing/capture ordering, byte-identical hydrate, revocation propagation, quarantine, rotation propagation, and a needs_rotation bug fix tied to PR #132), plus traps notes; and adds a matching dated work-log entry summarizing this validation.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Possibly related PRs

• Reederey87/DevStrap#98: Adds the preceding §F.2 subsection to the same spec/19 runbook that this PR's §F.3 directly follows.
• Reederey87/DevStrap#85: Adds a prior live-R2 dogfood validation wave with matching spec/18 and spec/19 update pattern.
• Reederey87/DevStrap#58: Documents the related pairing + rotation runbook close-out that this PR's rotation/revocation notes build on.

Poem
A rabbit hops through docs anew,
Logging waves of sync so true—
Devices paired, keys revoked with care,
Rotation fixed, quarantine laid bare.
Another entry stamped and filed,
This dogfood run, forever styled. 🐇📜

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The summary is detailed, but the required Tests and Safety Checklist sections from the template are missing.	Add a Tests section with the relevant commands or note why they were skipped, and include the full Safety Checklist with checked/unchecked items.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly names the spec/19 §F.3 runbook docs update and matches the change.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch docs/f3-dogfood-runbook

---

_{Comment @coderabbitai help to get the list of available commands.}