- Re-anchor W1..W4 source links to the renumbered v0.1 user stories
(story 1 "First run" was deleted in the v0.1 refresh).
- W2 now points at ADR-010 and CONTEXT.md as well as the product spec.
- W4 reframed from "first-run setup" to "one-shot provisioning, never
repeated mid-session" so it covers both the v0.1 build-time path and
the v0.9 on-device path.
- ADR-005 tradeoff row rewritten: "captive-portal form" was wrong after
the v0.1 refresh; replaced with the binary-as-secret-store framing.
- New ADR-010 row in the tradeoffs table.
- Read-across notes flag that C12 owns ADR-010's implementation but not
its UX contract, and that C11 LittleFS is unused in v0.1.
- Section 8 picks up three new cross-doc inconsistencies that were
spotted and fixed during the refresh (commit-message format mismatch,
captive-portal vs. solo target user, vocabulary leak resolved by
CONTEXT.md).
22aeb449e3