feat: sync latest ARR implementation

.project-docs/80-commitments/commitments.md

@@ -1,11 +1,15 @@
 # Commitments
 
-Track future-facing memory: promised follow-ups, unfinished loops, timed checks, and restart points.
+No timed or externally delegated commitment is currently active.
 
-| Date | Commitment | Trigger / Due | Owner | Status | Next Action |
-|---|---|---|---|---|---|
-| 2026-07-29 | Deploy the stable public Web/MCP profile, refresh SuperAgent discovery and rerun the no-PII XML vertical slice | Before enabling real business XML upload | User: deploy/DNS/Secrets/platform save; Codex: verify the next E2E when asked | Pending user deployment | Follow `deploy/README.md`; require Web `processing_ready=true`, MCP unauthenticated 401 and authenticated one-tool discovery; rebind/save/publish SuperAgent against the stable domain, then require an MCP commit receipt plus matching Finance facts. |
+## Open Product Work (not a promise in this task)
 
-## Use
-
-Record only commitments that should affect future sessions. Routine next steps can stay in `30-worklog/current-state.md`.
+- Login credentials, port-8766 activation, authenticated history and logout are complete. One controlled no-PII upload
+  filename check and one released 5/5 company-report job under processor 1.2.0 remain open product acceptance work.
+- The Booking extraction/review program is source-complete, migrated and transaction-tested against live PostgreSQL with
+  an outer rollback. One operator-authorized real upload/edit/delete/activate flow remains open product acceptance work;
+  this record is not authorization to change the current Booking source.
+- Rotate the Web password to a value distinct from the public username, update only the existing Keychain item and
+  perform one controlled restart/login/logout check.
+- Package Node/artifact-tool and a shared output volume into the eventual production worker runtime.
+- Run one controlled no-PII XML vertical slice on the eventual ARR2.0 server deployment.