docs: update plan with Graph deployment status

[SuPuHe]

Summary

Update the canonical delivery plan with the current open-PR progress and verified The Graph deployment status. Clarify that the Subgraph is published with an immutable deployment but is not yet allocated/indexed on the decentralized network. Align plan_missing_parts.md with the remaining allocation, MCP/model, and live-proof gaps.

Scope and acceptance criteria

• The change is limited to the documentation/status update.
• plan.md records open PRs docs: correct Gate P4 verification status #42, fix(settlement): close lane B review follow-ups #43, and fix: require recovery lookup config #44 as pending human integration.
• plan.md records the published Subgraph, deployment CID, public IDs, Explorer status, and Studio-vs-decentralized query distinction.
• plan_missing_parts.md separates deployment identification from remaining allocation/indexing and live recovery evidence.
• No unrelated cleanup is included.

Product and security invariants

• Tenant isolation remains fail-closed.
• Sponsor authorization, auditability, and daily caps remain enforced where applicable.
• Recipients cannot modify sponsor controls or access sponsor-only data.
• No secret, token, production identifier, or personal data is committed or pasted into review prompts.
• Any non-applicable invariant is explained below.

Invariant notes:

Documentation-only change. One intent / at-most-one settlement and UNKNOWN safety semantics are preserved. The Graph remains observational and non-authoritative; production recovery remains FALLBACK_DIRECT_RECOVERY until allocation and live MCP/model/Arc evidence are complete.

Validation

Commands and results:

npx.cmd --yes markdownlint-cli2@0.18.1 plan.md plan_missing_parts.md .agent/context/20260908T231211Z-update-plan-subgraph.md: PASS (0 errors)
git diff --check: PASS
git diff --cached --check: PASS
git write-tree: 7cca5327ec867a85f373d353d71e44a0fc3de9de
git status --short --branch: PASS (clean)

Independent review evidence

Gate A — exact candidate tree before push

• Base commit SHA: 48391e4968675764632627716e580988a271c13d

• Candidate tree SHA: 7cca5327ec867a85f373d353d71e44a0fc3de9de

• Candidate commit SHA: 510421b20e9d8f971b95065ee25fcc86d46ccf25

• Reviewer tool: free-pi-cli

• Reviewer model: glm-5.3-flash

• Verdict: VERDICT: PASS

• Findings or residual risks: no blocking findings; Explorer and PR status claims are external-state snapshots.

• The reviewed tree equals the committed tree.

Gate B — exact remote PR head

• Pull request URL/number: to be filled after creation

• Remote head commit SHA: to be filled after creation

• Remote head tree SHA: to be filled after creation

• Reviewer tool: free-pi-cli

• Reviewer model: pending

• Verdict: pending

• Findings or residual risks: pending exact-head review and required CI.

• Gate B reviewed the current remote head and matches Gate A's approved tree, or a fresh Gate A was run for the changed tree.

• Agent policy / repository-policy and all applicable CI checks pass.

Risk and rollback

• Residual risks: PR docs: correct Gate P4 verification status #42–fix: require recovery lookup config #44 remain open and external Graph allocation/indexing status may change; duplicate public Subgraph registration remains a human decision.
• Rollback or recovery plan: revert commit 510421b20e9d8f971b95065ee25fcc86d46ccf25; no runtime rollback is required.

Human merge

• A human owner has reviewed the evidence and will perform the merge.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	oneshot	510421b	Sep 08 2026, 11:24 PM