Documentation debt sweep: 5 of 6 items resolved, 1 confirmed accurate

- docs/lithosananke/ROADMAP.md + M7.1.md: fixed stale "Branch: lithosananke"
  (no such branch post-split), M7.1's "Design Complete" status (shipped
  and live, redirected to FABRIC*.md), the M8/success-criteria
  self-contradiction (OBSOLETE marking vs. unqualified live criterion),
  and the stale AHCI/SATA claim for M9 (real implementation is
  virtio_blk.c) -- also corrected BLOCK/BUFFER/UPDATE/FLUSH and block
  device abstraction to [x] since both are confirmed live in
  src/word_source/block_words.c and block_subsystem.c.
- Top-level ROADMAP.md: marked OBSOLETE (Captain Bob's call -- more than
  "stale," the architecture/branch topology/terminology it describes no
  longer exist), pointing to docs/lithosananke/ROADMAP.md and
  FABRIC*.md for current status.
- docs/03-architecture/word-acl/DESIGN.md: fixed the ACL Phase 7
  contradiction -- Phase 7 (LithosAnanke kernel parity) is independently
  verified complete per .claude/CLAUDE.md, not "remaining"; removed the
  stale lithosananke-branch-parity framing.
- VM-FLEET-ATTRACTOR-DESIGN-20260705.md's doe-campaign.4th "broken" claim:
  investigated, ran SMOKE-CAMPAIGN live (completes clean, fleet heat
  conserved) -- initially read as contradicting the claim, corrected
  directly by Captain Bob: a clean execution trace doesn't disprove the
  doc's actual argument (no real controlled-experimental-factor
  mechanism). Confirmed accurate, left untouched.
- Isabelle/HOL pipeline-metrics model/C-struct mismatch: confirmed a real
  proof-modeling gap (pm_last_accuracy_num/den has no analogue in the
  real PipelineGlobalMetrics struct), not stale prose -- tracked here
  rather than fixed, matching the .thy file's own scope boundary and
  this project's standing caution that each Isabelle gap needs its own
  subsystem model.

ACL-RWT DoE overhead re-measurement (the 6th item) intentionally not
started -- a full multi-architecture DoE campaign, not a doc-text fix,
holding for explicit confirmation given the scale.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CXjAPTEKrgY2Mrk25KoLDn

docs/03-architecture/word-acl/DESIGN.md

@@ -1,7 +1,11 @@
 # Word-Level ACL System
 
-**Status:** Implemented through Phase 6 — Phase 7 (LithosAnanke parity) remaining
-**Target branch:** `master` complete; `lithosananke` parity next
+**Status:** Implemented through Phase 7 (LithosAnanke kernel parity) — independently verified
+present in current `master` (`.claude/CLAUDE.md`'s Word-Level ACL System section). Phase 8
+(PKI/thumbdrive minting) is the current open item.
+**Target branch:** `master` — post-split, this repo's sole production line; there is no
+separate `lithosananke` branch to reach parity with (see `.claude/CLAUDE.md`'s "On the branch
+topology" note)
 **Implementation files:** `capsules/ACL.4th`, `capsules/zuse.4th`, `src/word_source/acl_words.c`, `src/test_runner/modules/acl_words_test.c`
 
 ---
@@ -368,16 +372,24 @@ Five `.thy` files in `proof/` alongside existing VM proofs:
 - [x] `ACL_No_Escalation.thy` — a child VM cannot produce a pinned entry
   with higher privilege than its inherited mode
 
-### Phase 7 — LithosAnanke Parity (REMAINING)
+### Phase 7 — LithosAnanke Parity (COMPLETE — independently verified)
 
-- [ ] Merge / port ACL subsystem to `lithosananke` branch
-- [ ] Verify `ACL.4th` loads cleanly in kernel context (freestanding)
-- [ ] `ACL-BOOT` runs at kernel boot before first `BIRTH`
-- [ ] `vm->emergency_console` wired to kernel REPL active flag
-- [ ] `vm->zuse_session` wired to kernel Zuse console authentication path
-- [ ] Three-arch acceptance: amd64, aarch64, riscv64 boot to `ok>` with ACL
+There is no separate `lithosananke` branch to merge/port to (post-split, this repo's `master`
+is the sole production line) — that framing is stale. Verified present directly in current
+`master`: `acl_recheck()`/`zuse_session`/`emergency_console` wiring confirmed in
+`src/starkernel/vm/vm_core.c`; the per-iteration `emergency_console = zuse_session ? 0 : 1`
+assignment confirmed in `src/starkernel/repl.c`; the old `!vm->zuse_session` ACL-check bypass
+confirmed absent from `src/vm.c`. See `.claude/CLAUDE.md`'s Word-Level ACL System section for
+the full verification writeup.
+
+- [x] Verify `ACL.4th` loads cleanly in kernel context (freestanding)
+- [x] `ACL-BOOT` runs at kernel boot before first `BIRTH`
+- [x] `vm->emergency_console` wired to kernel REPL active flag
+- [x] `vm->zuse_session` wired to kernel Zuse console authentication path
+- [x] Three-arch acceptance: amd64, aarch64, riscv64 boot to `ok>` with ACL
   active and no regressions
-- [ ] Commit acceptance logs
+- [x] Acceptance logs — this repo's standing convention commits every acceptance boot's serial
+  log under `logs/`, not a one-time Phase 7 action
 
 ### Phase 8 — PKI / Thumbdrive Authentication (FUTURE)