Address review 443 on PR #616: mandatory operator-guide/runbook cross-links, LLM vs operator restart/relaunch split, and sanctioned post-merge parity staleness response (stop, report, operator reload, re-verify). Add docs tests enforcing F1–F3. Refs: #615
Policy: real Gitea mutations use stable control runtime only; normal sessions must not kill/restart/relaunch from worktrees or edit the stable checkout. Promotion is operator-only with proof and rollback. Refs: #615
sysadmin