Phase 11: deviation reconciliation #104

Roadmap phase 11 — Deviation Reconciliation (docs/work/mvp/2026-09-27-dotnet-sdk-v1-roadmap-design.md).

Re-derive from source every design §10 deviation, every §11 ambiguity resolution and every §12 coverage-index cell; repair what does not hold (TDD), retain a deviation only with a justified reason, and correct the documents where the code is right.

Scope

• Audit of 101 entries (§10: 33, §11: 68), each with a verdict (confirmed / narrowed / contradicted) and a disposition (repair / retain / doc-correct)
• TDD repairs for the defects the audit surfaced (async bridge, cancellation leak, UrlRedactor OOM swallow, HttpResponseException argument checks, SSE per-event cap, among others)
• docs/deviations.md (as-built audit, one row per §10 entry) and the ledger-audit gate in CI
• §12 regenerated from the checklists, with a CI check
• Disposition of every inbound status-note bullet and every docs/first-release.md entry
• As-built status lines in design §§2–9 refreshed from d45e64b
• Investigation of the reproducible packages (NFR-12) failure that was admin-merged on feat: phase 10 cross-cutting invariants and conformance (XCUT-1..-24, NFR-1..-17, appendix B) #102

Exit (from the roadmap): docs/deviations.md exists with every row as-built: …; the ledger-audit gate is in CI; every §12 row states its satisfied, vacuous, not-satisfied and deferred IDs; the one-time public-surface choices are listed in docs/first-release.md for phase 12.

Design and plan: docs/work/mvp/phase11/.