Update §8.7 + the banner + §1 TODOs to reflect that Phases 2–5 shipped today (apply/revert pipeline, severity-split auto-apply, the WebUI Improvements stream + per-app chip, and make_hotfix.sh). Only the registry/marketplace stays deferred (demand-gated by design). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Signed-off-by: librelad <librelad@digitalangels.vip>