[Xuepoo]

Priority: P2 | Area: architecture | Labels: docs, P2, area:architecture, area:security | Milestone: v0.1.0 | RFC: none | Task: CTX-0172

Summary

• Records the merged Core provider-publication control state machine: bitty #2330 (squash 3171f4f5) behind the default-off publication-control feature, consuming bitty-ipc-api at e6a2c0c.
• Documents the Core-minted snapshot_version separation: the source-view version starts at 1 and advances only when Core adopts a replacement projection; the publication version stays in PublicationId and the tuple carries the snapshot version.
• Records the bounded framing, authenticated TLS adapter, exact establishment/projection/publish/ack/bind/bound validation, one pending publication/receipt, rotation with one retired predecessor, 36 control tests, and the passing Windows fail-closed gate.
• Keeps strict publication disabled: no Admit, data-channel reservation, ai.provider_list handler, or provider/credential/tool contact. The Core ai_helper spawn integration, real provider-registry source, TLS record round-trip, and per-turn TLS work budgets remain pending.
• Corrects the earlier "in progress under CTX-1390 / not merged evidence" wording.

Verification

• just check exit 0 in bitty-ai-docs (91 Markdown files; language/agents/hygiene/svg/actionlint).
• Docs-only Markdown change; no code, script, workflow, config, lockfile, fixture, or submodule pin.