chore(coding): record ML-09 final review

.project-docs/30-worklog/tasks/20260826-makelore-data-service-client-b72e4c19.md

@@ -8,7 +8,7 @@
 - Worktree: D:\Datas\OthersProjects\makelore-data-service-client-b72e4c19
 - Base commit: f2456039230f68e3ecb2c8653fc3379c23bbe5ce
 - Owner: codex-root
-- Status: In Progress (ML-01 through ML-09 integrated; review/X-01 pending)
+- Status: In Progress (ML-00 through ML-09 product/review complete; X-01 pending)
 
 ## Scope
 
@@ -175,6 +175,12 @@
   deleted from this coordinator while its source record remains in
   `D:\Datas\OthersProjects\makelore-ml09-data-service-remediation-5e7c2a91`.
   The product frontier after this merge is `38843e091fbbe68ec934336b8ed3a08c955afb28`.
+- Final ML-09 repository-local review is complete over the fixed client review
+  range `f2456039230f68e3ecb2c8653fc3379c23bbe5ce` →
+  `bb832c66660d993baa6147cf058078a5cd89fcb2`. Standards: PASS. Spec: PASS.
+  ML-00 through ML-09 product delivery, review, and the single remediation
+  pass are complete; this conclusion does not claim the external X-01 live
+  acceptance.
 
 ## Verification
 
@@ -437,28 +443,23 @@
   audit matched the expected 15 source paths with no extra or missing path,
   and the added-lines scope scan found no Firebase, Redis, retry/cache, or
   published-runtime expansion.
+- Final ML-09 review ledger: fixed range
+  `f2456039230f68e3ecb2c8653fc3379c23bbe5ce` →
+  `bb832c66660d993baa6147cf058078a5cd89fcb2`; Standards PASS and Spec PASS.
+  ML-00 through ML-09 product/review scope is complete. This documentation
+  update changes no product files; the worktree remains held for X-01.
 
 ## Follow-ups
 
-- ML-02 identity choice and legacy/independent-copy UX, ML-03 Main Data
+- X-01 live acceptance remains pending: exercise real PostgreSQL with a
-  Service, ML-04 Pi Data Service tools, ML-05 preview data sessions, ML-06
+  signed-in MakeLore preview and record the live result separately;
-  Agent Browser pre-document injection, and ML-07 generated SDK/Skill assets
+  repository tests and E2E cannot substitute for this acceptance.
-  are integrated. ML-04 consumed the `DataServiceOperations` seam from the
+- GitLab HTTPS PR authentication remains unavailable non-interactively in this
-  recorded ML-03 frontier and preserves its active-project identity and
+  environment and `gh`/`glab` are not installed; draft PR promotion remains
-  trusted project-path constraints. ML-05 and ML-06 preserve the Main-owned
+  blocked and no draft PR is claimed from this worktree.
-  credential boundary; ML-06 supplies the narrow exact-Origin injection seam
+- The existing full E2E deviation remains: 25 passed / 1 failed at
-  and ML-07 consumes only that local capability while keeping ordinary
+  `tests/e2e/pi-coding-first-chat.spec.ts:575` because the `当前对话模型`
-  arbitrary URL opens data-free.
+  combobox stays disabled until the 30s selector timeout.
-- The broader ML-00 through ML-09 coordinator task remains in progress; this
-  record now has ML-08 and ML-09 verification but does not claim review
-  closure, release proof, or live acceptance. The client/server draft PR
-  promotion is externally blocked in this environment because GitLab HTTPS
-  credentials are unavailable non-interactively and `gh`/`glab` are not
-  installed; no draft PR is claimed from this worktree.
-- ML-09 remediation is integrated; review closure remains pending, including
-  the known Pi model-combobox E2E deviation. X-01 remains a TODO after review:
-  exercise real PostgreSQL with a signed-in MakeLore preview and record live
-  acceptance separately; repository E2E results cannot substitute for it.
 
 ## Promotion Candidates