docs(contributor): reconcile landed task rows

docs/development/contributor-tasks.md

@@ -69,7 +69,7 @@ identity rather than copying the whole plan here.
 | P1 | Shared coordination | Qualify the selected local authority durability and crash/replay boundary against existing D2 acceptance | #4224 / #3245 | Needs design |
 | P1 | Core hardening | One budget-aware CLI output ergonomics slice | #2881 | Needs design |
 | P2 | Project docs | Release docs install, activation, and recovery guidance through v0.5.4 | GH-C04 | Landed via #3982 |
-| P2 | Maintainability | CLI ownership and hot-module extraction | GH-C06 / #4803 | In review |
+| P2 | Maintainability | CLI ownership and hot-module extraction | GH-C06 / #4659 #4803 #4818 | Done |
 
 ## Product Manager Cut
 
@@ -149,10 +149,10 @@ for contributors who can run local CLI smokes and keep changes scoped.
 
 | ID | Area | Task | Validation |
 | --- | --- | --- | --- |
-| GH-C06 | cli | Claimed: PR #4803 extracts the `goal-channel prepare-operation` and `deliver-operation` command owner while preserving the public invocation, source-runtime routing, provider error mapping, and parent rendering/exit contract. The operation owner and parent remain below the module budget, and no compatibility wrapper was added. | Command-specific smoke, `python3 examples/cli-command-module-size-ownership-command-modularization-smoke.py`, `python3 regression/cli-command-module-contract.py`, and focused pytest if rules move |
+| GH-C06 | cli | Landed: #4659 owns `update` registration and dispatch, #4803 owns `goal-channel prepare-operation` and `deliver-operation`, and #4818 owns quota action selection. The public commands remain unchanged, each parent and extracted owner stays below its module budget, and no compatibility wrapper was added. | Command-specific smoke, `python3 examples/cli-command-module-size-ownership-command-modularization-smoke.py`, `python3 regression/cli-command-module-contract.py`, and focused pytest if rules move |
 | GH-C88 | cli | Implement one budget-aware CLI output ergonomics slice for #2881: shorter default summaries with a typed `--json` escape hatch on one command family, keeping hot-path payload budgets and differential allowances intact. | `python3 examples/control_plane/cli-output-budget-regression-smoke.py`, focused command smoke, and `loopx check --scan-path docs/status-data-contract.md --scan-path docs/development/contributor-tasks.md` |
 | GH-C70 | runtime | Claimed: PR #3664 narrows host-loop parity to one producer-generated bounded-wait scheduler-hint contract between the external scheduler worker and Pi: both real consumers must produce the same provider-neutral stop/wait plan, including the final quota/replan recheck triggered by the third unchanged poll. | `python3 -m pytest -q tests/test_host_loop_runtime_parity.py tests/test_external_scheduler_worker.py tests/test_pi_goal_mode.py`, `node --test tests/pi_goal_loop_runtime.test.mjs`, `python3 examples/external-scheduler-worker-smoke.py`, and `loopx check --scan-path docs/integrations/runtime-connector-catalog.md --scan-path docs/development/contributor-tasks.md` |
-| GH-C100 | state | Characterize the shipped file-backed `claim_work` executor with a provider-neutral parity fixture (#3700): same-target competition has exactly one winner, independent targets rebase, replay returns the original receipt, same-operation-id with different command semantics is rejected with no mutation, and stale provider generation does not duplicate transitions. Keep fixtures synthetic and public-safe. | `python3 -m pytest -q tests/control_plane/test_coordination_executor.py tests/control_plane/test_coordination_file_provider.py`, the new parity fixture, and `loopx check --scan-path loopx/control_plane/coordination --scan-path docs/architecture/rfcs/shared-goal-authority-state-provider-v0.md --scan-path docs/development/contributor-tasks.md` |
+| GH-C100 | state | Landed via #4422: the provider-neutral parity fixture drives the shipped file-backed `claim_work` executor through same-target competition, independent-target rebase, exact replay, operation-identity mismatch, and stale-generation rejection. The fixtures remain synthetic and public-safe. | `python3 -m pytest -q tests/control_plane/test_coordination_executor.py tests/control_plane/test_coordination_file_provider.py tests/control_plane/test_coordination_provider_parity.py` and `loopx check --scan-path loopx/control_plane/coordination --scan-path docs/architecture/rfcs/shared-goal-authority-state-provider-v0.md --scan-path docs/development/contributor-tasks.md` |
 | GH-C102 | state / tests | Extend the shared production-scale coordination fixture with one accepted RFC invariant or reproduced public regression that its current envelope does not cover. Update the checked-in envelope, shared generator, and an independent negative or mutation-style assertion; run the same dimension through every affected provider conformance arm. Keep the data deterministic and public-safe, do not copy a production snapshot, and do not weaken an existing dimension merely to make a provider pass. | `npm run test:control-plane`; when a provider-backed arm changes, run its isolated real integration suite (for PostgreSQL, `LOOPX_TEST_POSTGRES_URL="$DISPOSABLE_POSTGRES_URL" npm run test:postgresql-authority-store`); `loopx check --scan-path tests/fixtures/control_plane --scan-path tests/control_plane_ts --scan-path docs/development/testing-and-quality.md` |
 
 ### Advanced Implementation

examples/docs-governance-smoke.py

@@ -467,6 +467,8 @@ def assert_contributor_task_board_is_current() -> None:
         "The scheduler remains outside settlement",
         "M7 parity fixtures plus a read-only journal inspection/`interpret_turn_journal` lens shipped",
         "do not extract a shared executor until two adapters share execution ownership",
+        "Landed: #4659 owns `update` registration and dispatch",
+        "Landed via #4422: the provider-neutral parity fixture",
     ):
         assert required in tasks, required
     for stale in (
@@ -475,6 +477,9 @@ def assert_contributor_task_board_is_current() -> None:
         "Implement the remaining canonical `/loopx-global-risks` command",
         "global risks and goal summary stay host-only",
         "Add one negative fixture proving fail-closed legacy upgrade",
+        "| P2 | Maintainability | CLI ownership and hot-module extraction | GH-C06 / #4803 | In review |",
+        "Claimed: PR #4803 extracts",
+        "Characterize the shipped file-backed `claim_work` executor with a provider-neutral parity fixture (#3700)",
         "| GH-C82 |",
         "| GH-C59 |",
         "| GH-C61 |",