#310 Windows handoff
Head: e1036ef9a53290da359c0f9155abfe5bb56e1768
Branch: fix/310-local-update-docs
Base: 289e3cdfe39a8a4e91f5ea7d4b436f11a50b191e
8 files, +206/-55; exact raw trailer Co-authored by: todlando verified.

Native exits: pool claim0; build0; checked nonempty inventory0; nextest0 (10/10,3.022s,1823 outside-filter skips); online smoke0; offline smoke0; unavailable-listener smoke0; xtask gen0; xtask check0; traceable-reqs check0 (923/923,zero findings); pool release0.

Online actual signed CLI apply used real seed-control + broker + ephemeral docs listener, emitted http://localhost:56390/hfenduleam/docs/changelog.html and index.html. Both fetched HTTP200 with expected newly landed bytes. Actual consent producer persisted the same changelog link.
Offline and live-daemon/no-listener controls preserved release URL and directory fallback; all modes deliberately configured incorrect port1 and none advertised it.
No production daemon/home mutation, no test retries, no driver-forced termination. Apply swapped only a disposable CLI copy; this smoke does NOT prove supervised brain replacement or a full rollout.

Proof: verify/receipt.json; verify/inventory.stdout; verify/tests.stderr; verify/smoke-{online,offline,unavailable}.stdout. Throwaway source retained here as update_links_smoke.rs; removed from product tree after proof.
Docs: docs/receipt.json + docs-generation-classification.json; checks/receipt.json + checks/trace.stdout. Generator's reference.md CRLF normalization was proven semantically unchanged and original bytes restored before the successful first check. No generator/check retry.
post-runtime-provenance.json proves only CHANGELOG.md, docs-site/src/changelog.md, docs-site/src/self-update/overview.md and throwaway removal followed runtime proof; all runtime/permanent-test bytes remain unchanged.

Initial admission refused BEFORE any native claim because service-owned cargo hid cwd/argv. pool-claim-admission-refused retains the census; ancestry identified real C:\actions-runner\bin.2.337.0\Runner.Worker.exe + RunnerService.exe. Those and the known gate/hertz source trees were admitted. First actual claim0.

Pool released; own target retained for gate/rework, 12,434,530,965 apparent bytes. Shared-drive free sample at release:169,341,616,128 bytes, not a lease. No target deletion or reclaim claimed.