docs(crv): coordinate consumer runtime readiness convergence

[daniele21]

Current CRV status

The repository implementation has progressed beyond the original planning baseline in this draft coordinator.

Completed / integrated

• CRV-00 scope/invariants — DONE.
• CRV-10 exact preset/execution identity — DONE via feat(crv): make custom preset model policy explicit #467/fix(crv): make activated custom presets executable #468.
• CRV-20 consumer-safe runtime-readiness contract — DONE via feat(crv): add consumer-safe runtime readiness boundary #472 (Consumer SDK 0.1.0-alpha.6, Binder protocol minor 4).
• CRV-30 activation-bound automatic runtime preparation — DONE via test(crv): prove activation-bound runtime preparation #474.
• CRV-40 source-backed runtime readiness — DONE via feat(crv): wire source-backed consumer runtime readiness #475.
• CRV-50 Harness configuration/runtime presentation contract — DONE through the integrated preset/control-plane slices and CRV-70 convergence.
• CRV-60 first RedactGuard configuration-readiness slice — DONE via RedactGuard feat(consumer-api): start CA-1 capability policy #100.
• CRV-70 Harness Applications runtime-readiness UI — DONE via feat(crv): surface Applications runtime readiness #476.
• CRV-80 RedactGuard source-backed runtime-readiness UI/lifecycle — DONE via RedactGuard feat(consumer-api): implement CA-2 public facade #101.
• CRV-90 focused regression gaps — DONE via test(crv): close runtime regression matrix gaps #477 plus the existing CRV lifecycle/ownership suites.
• CRV-100 automated convergence/candidate freeze — DONE: Harness v31 source a30f67b21e24adc6efea838e9a9d65cc78446f28; RedactGuard v11 source 4679c23a9a22e5242761fe52af97f4eb7432aec7; both have exact-source package evidence. RedactGuard runbook/current-state handoff is integrated through test(ombra): add OMB-0 runtime and APK evidence #106.

Remaining

• CRV-110 — REAL_ENVIRONMENT: same-signer Harness + RedactGuard release APKs on a representative ARM64 Android device with a real GGUF. Prove Host absent/reconnect, exact assignment/preset activation, automatic cold preparation, ready/generating state, cancellation/recovery, Host restart, failure paths, review/export and privacy-safe evidence against one exact identity set.
• CRV-120 — cleanup: only after CRV-110 passes, transfer any remaining durable knowledge, reconcile dependent ACUX/CPREC/RG-HCP evidence gates, and remove/close this temporary coordinator by default.

Invariants preserved

Harness owns model/config/runtime/residency; RedactGuard consumes consumer-safe published state only. RuntimeOrchestrator remains the sole model materialization owner. Navigation/discovery/readiness observation is side-effect free. No phone-global selected-model fallback, no consumer-owned model identity/tuning, and no prompt/output/private-path leakage were introduced.

Coordinator note

The file content on this old draft branch predates the integrated implementation and must not be treated as current executable state. Current dev, merged PR evidence and durable current-state/runbook owners are authoritative. Keep this PR draft until CRV-110 finishes; CRV-120 should normally close/remove the temporary workstream rather than merge stale planning text.