plan: P0 notes

plan/served.md: defect 21 (found in P0: the CPA package's
general-journal.iif ignores as_of, so an as-of package includes entries
dated after it; its xlsx and csv files respect it) joins the defect
count, P3 beside defect 7, and the P10 re-run; 5.6 records that the
first company's goldens are kept privately in its own books dir
(export_cpa_package zips plus a canonical JSON form made by its
goldens/canon.py, which normalizes per-export text, with the comparison
protocol in its README), not in this public repo, by decision.
plan/STATUS.md: P0 is in final review.

Review round 3: STATUS says what is true (P0 in final review, the
mutation runs done).

Adds defect 22 (depreciation through an asset's final month plugs to
the full amount mid-month) to P3 and to the P10 re-audit.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01T3gXMVt7XJPi6ens1or9Dj

plan/STATUS.md

@@ -1,40 +1,37 @@
-# STATUS — 2026-10-16: "Served" planned, P0 paused mid-build
+# STATUS — 2026-10-16: "Served" planned, P0 in final review
 
-## Now: Served (plan/served.md), paused 2026-10-16
+## Now: Served (plan/served.md), P0 in final review
 
 The 2026-10-16 audit of the first company's books (62 verified findings,
 20 engine defects) and the design discussion that followed produced
 `plan/served.md`: the books become a server that owns its data, agents
 reach them only through the MCP from anywhere, settings and conventions
 move into the journal, no scaffold. Phases P0-P10; the owner's decisions
-of 2026-10-16 are at the top of the plan and bind every phase.
+of 2026-10-16 are at the top of the plan and bind every phase. A 21st
+defect turned up in P0 (the CPA package's IIF ignores `as_of`; P3).
 
-**Paused** on 2026-10-16 to save the owner's weekly usage credits. Resume
-lean: finish work solo or with one reviewer; big multi-agent fan-outs
-only when the owner asks.
+Resume lean: finish work solo or with one reviewer; big multi-agent
+fan-outs only when the owner asks.
 
-**P0 (guard rails) state** — three jj workspaces beside this checkout,
-none merged into `main` (main = the plan commit only):
-
-| Workspace | Change | State |
-|---|---|---|
-| `../wanderbooks-p0-misc` | `qntm` "P0: pin dev tools, honest transports doc, tools-only template" | done, committed, gates run for ledger-cli |
-| `../wanderbooks-p0-mcp` | `nuxl` WIP (~1,600 lines, 26 files) | stopped mid-build: import_local_file lockdown (roots = downloads + system temp; refuse data dir, books dir, vault, key dir, symlink escapes), tool annotations on all tools, short connect text + `books.handbook` tool/resources, bare `books://digest`, tokio mutex + spawn_blocking. Unknown how far each item got; not gated |
-| `../wanderbooks-p0-store` | `vnqq` WIP (~1,100 lines, 15 files) | stopped mid-build: `StoreError::NewerJournal`, `journal.format_set`, GUI/Snapshot distinction. Not gated |
-
-**To resume P0:** in each WIP workspace, diff against main, finish the
-items listed under "### P0" in `plan/served.md` (scope, tests, acceptance),
-run `just check` there; then stack misc -> store -> mcp on `main` in the
-default workspace, run `just check` and `cargo mutants --in-diff` on the
-P0 diff (output under ~/.cache/wanderbooks/mutants), one adversarial
-review, push (origin + github), `jj workspace forget` the three and
-delete their directories. After P0 lands, the owner reconnects the MCP
-(`/mcp` or a new session) so the new connect text loads.
+**P0 (guard rails) state:** built and gated, stacked on `main` in the
+default workspace (not merged, not pushed), through two review rounds:
+`qntm` (pins, transports doc, tools-only template), `vnqq` (the store's
+format gate: newer is not corrupt; the envelope and its hash frozen
+across formats; no repair of newer books), `nuxl` (connect text and
+handbook, annotations, the import roots' lockdown, fail closed, no file
+with a full TIN filed into the books), `rros` (docs), and this plan note.
+`just check` passes on the stack, and `cargo mutants --in-diff` has run
+on the P0 diff, every round (counts in `docs/testing.md`; output under
+~/.cache/wanderbooks/mutants). Left for P0: the owner's final review,
+then move `main` and push (origin + GitHub); the three P0 workspaces are
+already gone. After P0 lands, the owner reconnects
+the MCP (`/mcp` or a new session) so the new connect text loads.
 
 **Before-snapshots for later phases:** the first company's reports as of
 2026-10-11 and 2026-10-16 (journal head `d1ccd2fd…`, 355 events) are
 saved in that books dir under `goldens/p0-2026-10-16/` (exported through
-the MCP, no TINs). P1+ must reproduce them except where the P3 change log
+the MCP, no TINs), privately, by decision, never in this public repo
+(plan 5.6). P1+ must reproduce them except where the P3 change log
 adjudicates a difference (cash flow, defect 1).
 
 **Then:** P1 (journal-native settings and conventions), P2 (serve locally,