Milestones 4 and 5: project layer, review gate and serial merge, all measured

CHECKLIST.md

@@ -60,15 +60,29 @@ been measured.
 
 ## Milestone 4 — the project layer
 
-- [ ] Adopt a folder as a project; remember which host it is on.
-- [ ] Build the page layout; repair it; reset it.
+- [x] Adopt a folder as a project; remember which host it is on.
+      → `bin/office <folder>` writes `<folder>/.harness/harness.toml` (session, project,
+      machine, folder, task watched) and builds the pages. Re-running changes nothing.
+- [x] Build the page layout; repair it; reset it.
+      → `bin/board` adopts or creates each page and places them on workspaces 1–5 in order;
+      `--replace` rebuilds from nothing; `bin/project-reset` removed the panes, three
+      worktrees and three branches, and `bin/office` built them all back.
 - [ ] Pass: a project on another machine can be opened and used from here.
+      **Not tested.** This pane runs on .13 and I have no way to drive .27 or .51 from
+      here; `bin/office --host` and the runbook command for it are written but unproven.
 
 ## Milestone 5 — review and merge
 
-- [ ] `ocr` runs over the diff; a failing review refuses the task.
-- [ ] Merges are one at a time, re-checked after each.
-- [ ] Pass: the next task cannot merge until the first is settled.
+- [x] `ocr` runs over the diff; a failing review refuses the task.
+      → `AUD-165` added a `cleanup.sh` with `rm -rf "$HOME/tmp"`; `bin/merge --check`
+      refused with exit 5 and named the critical finding, and `cleanup.sh` never reached
+      `main`.
+- [x] Merges are one at a time, re-checked after each.
+      → a second merge while one holds the lock exits 6; after the rebase the task's verify
+      command runs again, and again on the base branch after the merge.
+- [x] Pass: the next task cannot merge until the first is settled.
+      → the lock refuses the second merge outright, and a refusal leaves the branch where
+      it was.
 
 ## Interface rules that are not optional