Record Phase 8D baseline and browser contract

docs/phase8d_plan.md

@@ -1,6 +1,6 @@
 # Phase 8D — Incremental web administration plan
 
-Status: **planned; no implementation or validation is claimed by this document.**
+Status: **8D.0 documentation/source audit and baseline build and user-provided runtime memory baseline recorded; remaining target evidence and runtime budgets pending. 8D.1–8D.22 remain planned.** See the [8D.0 baseline and M1 contract](phase8d_baseline.md); no authentication implementation is claimed.
 
 This is the execution plan for [roadmap Phase 8D](roadmap.md#phase-8--role-based-users-and-administrative-access). The roadmap retains the feature/security requirements; this document defines small work units, dependencies, and release gates. The [administration test matrix](user_administration_tests.md#planned-phase-8d-integrated-web-administration) remains the final acceptance checklist.
 
@@ -58,6 +58,8 @@ After each runtime-changing chunk: build; boot and read UART0 status/`memory`; l
 
 **Gate:** Existing admin and user browser login, serial data, USB, and SSH work; baseline `pio run` and target memory evidence are recorded. If the rolled-back baseline already fails login, diagnose that in a separate task before changing authentication. If target evidence is unavailable, the budget and runtime gate remain pending.
 
+**Record:** [8D.0 baseline, browser contract, resource inventory and target checklist](phase8d_baseline.md). The baseline build passed at 94,532 B linked RAM / 1,599,973 B flash; no device ports were available. A user-provided runtime memory baseline is now recorded for one web serial writer plus user/admin SSH sessions. Other workload measurements, reserve floors and incremental budgets remain pending. Do not treat the documented contract as implemented behavior.
+
 ### 8D.1 — Bounded server-side session primitives, not yet browser-facing
 
 **Start in:** `src/web_server.{c,h}`, `src/user_database.h`, `src/secure_random.h`; add a narrowly owned session module only if needed.
@@ -153,7 +155,7 @@ Update the roadmap and user/command documentation to distinguish completed featu
 
 ## Progress and next-request template
 
-Initial progress: **8D.0–8D.22 all planned.** Record incremental results in `docs/agent/current-state.md`, retaining the baseline and cumulative resource measurements as work proceeds. This planning-only change has not measured the target or run firmware acceptance tests.
+Progress: **8D.0 documentation/source audit and build complete; target validation and numeric runtime budgets pending. 8D.1–8D.22 planned.** Record incremental results in `docs/agent/current-state.md`, retaining the [baseline](phase8d_baseline.md) and cumulative resource measurements as work proceeds. User-provided web/SSH status and memory evidence is recorded in the baseline; the full target/browser acceptance checklist remains unverified.
 
 Suggested next request: