autonomy-controller: the owner's answers to the phase F handoff (decisions log)

tools/autonomy-controller/README.md

@@ -845,6 +845,12 @@ integrator decision until the owner promotes it here.
 | 2026-10-13 | Policy example | **`policy.example.json` names `composer-2.5` for Cursor.** That is the model the live run used. `composer-standard` was not offered by the CLI. The example's Cursor provider stays disabled. |
 | 2026-10-13 | Branches | **The live run's branches `auto/pr5-codex`, `auto/pr5-cursor` and `auto/pr5-transfer` are deleted.** The PRs, the ledger and the archives keep their heads. |
 | 2026-10-13 | Claude workers | **Isolating Claude workers from the owner's user-level hooks, skills, agents, slash commands and auto-memory is a card for later**, not built in phase F. |
+| 2026-10-13 | Evidence | **The storage branch's pre-rewrite commits are not purged.** GitHub still serves the four pre-rewrite commits `cbc1a0d72929`, `c9eb03d92`, `3ad39c834` and `ec6ac7cfd` by SHA. Each holds the unredacted PR 4 pilot tarball (blob `a81c1a1c`). The owner accepts that the account email stays readable there ("I don't care about my email"). The 2026-10-13 Evidence row ("removed from history") still holds for every commit reachable from the branch. |
+| 2026-10-13 | PR 5 live run (#779) | **The six PR 5 evidence archives stay on the owner's machine and are not published.** Four of them hold the account email, because they were written before #791's redaction. The verified record on the storage branch stands for them. (Accepted recommendation.) |
+| 2026-10-13 | PR 5 live run (#779) | **The outbox post 6149018991, signed `From: codex`, stands as posted.** The Codex agent operated the run on the owner's delegation, and an agent posts under its own name (CLAUDE.md). The 2026-10-12 row's `From: claude` assumed Claude would operate, and the 2026-10-13 delegation row covers the change, so no further ruling is needed. It is not re-posted. (Accepted recommendation.) |
+| 2026-10-13 | Codex adapter | **The owner's Codex `service_tier = "priority"` stays in the owner's configuration.** The controller keeps refusing a Codex launch while it is set (`operator-config-refused`), so the operator removes it for a controller sitting. A per-run override is built only if controller Codex runs become routine. (Accepted recommendation.) |
+| 2026-10-13 | Workstream | **Budgeted-autonomy closes after one cleanup PR.** The PR covers the line endings of `.claude/workflows/*.js`, stale README lines and the throwaway `PILOT-PR4.md`. The PR 5 run sheet `live-run-pr5.md` on the storage branch is marked historical and is not reused. No phase G is planned, and a live exercise of merge and a repair round is not scheduled. The brief's items that no PR delivered get no cards now; among them are posts from the tick, card intake, container validation in a tick, the verifier role, the `phases` table and premium escalation. (Accepted recommendation.) |
+| 2026-10-13 | Claude workers (#790) | **Card #790 is a precondition of the next live controller run that launches Claude workers.** It is not built now. It is built, and merged, before such a run is launched. (Accepted recommendation; it refines the 2026-10-13 Claude workers row, "a card for later".) |
 
 ## Verification