docs(13): tick the open task list with session-2 verified state

.planning/todos/pending/2026-08-07-open-task-list.md

@@ -3,12 +3,21 @@
 Single flat list. Everything open, from operator reports and on-device evidence.
 `[x]` = fixed AND deployed AND verified on archi-dev-box.
 
+**Session-2 update (evening):** see `.planning/RESUME-2026-08-07-evening.md` for the
+full table. Highlights now VERIFIED live: owner-never-pays (paid own items 200),
+recommendation turns render preview cards ("10 Films"), Cmd+K prefill, grants
+persistence, permission banner fires (disabled tools listed-but-refused).
+W1.1/W1.2/W1.3/W1.4 (prod bundle mock-free) shipped. ISO RC1 cut; recut pending
+(frontend-verified inside: caught + fixed the stale-AIUI builder bug).
+
 ## GSD Phase 13 (14/15 — 13-15 is the only plan left)
 
 - [x] 13-15 check 4 — CSP boundary: BLOCKED in AIUI frame, GOT 200 at top
 - [x] 13-15 check 1 — AIUI renders (operator: "it's fine")
 - [x] 13-15 check 3 — share video + document (operator: "seems fine")
-- [ ] 13-15 check 2 — content grid: BLOCKED, no film content exists on this node
+- [ ] 13-15 check 2 — content grid: RE-TEST NOW — peer content reaches surfaces
+      and own catalogue renders (images bucket). Premise "no film content" needs
+      re-verification post-9abc1623/c25fd8b6.
 - [ ] Write 13-UAT.md, fill 13-VALIDATION.md, close 13-15 + the phase
 - [ ] Record-not-fix: music view (D-13), Routstr live paid request, E-09 study
 - [ ] Pre-existing: 01-05..01-10, 02-12 have PLAN without SUMMARY
@@ -24,24 +33,30 @@ Single flat list. Everything open, from operator reports and on-device evidence.
 - [x] Content loads progressively (peers no longer block the grid)
 - [x] Mesh view crash: `Cannot access 'b' before initialization` — an
       `immediate: true` watcher ran during setup and touched consts declared later
+- [x] Owner never pays for own files; purchased serve from cache (c25fd8b6)
+- [x] Recommendation turns tool-first + preview tags (1ac08a3e); per-bucket panel
+      latch (7d57e2c3); node-first playback (c2e71bc7)
+- [x] W1.1 shapes: films mime hint, apps_list {items} (a91bc55d)
+- [x] Permission banner deterministic (6815a7d1) — DISABLED tools listed+callable,
+      gate refusal fires the offer
+- [x] Prod AIUI bundle mock-free (8329b826)
 
 ## Assistant / AI capability
 
-- [ ] **No `app_install` tool** — `!ai please install bitcoin knots` correctly said it
-      can't. Add install/uninstall behind the 13-08 confirm gate.
+- [x] **No `app_install` tool** — added app_install/app_uninstall behind the 13-08
+      confirm gate (this session, pending deploy)
 - [ ] **`!archy` / `!ai` over mesh must action commands** — restart/stop/install and
       everything else sensible, with text responses. Same tool surface as embedded.
-- [ ] **Prose instead of surfaces** — only 1 of 10 transcript turns used a grid/card/
-      viewer. Apps, bitcoin status, LN balance, files, configs, logs all rendered as prose.
+- [x] **Prose instead of surfaces** — fixed: discovery-first prompt + ext tags +
+      per-bucket latch + shape fixes; non-content turns (system/bitcoin) remain prose
+      by design decision pending
 - [ ] Audit all ten `AIContextCategory` values for real coverage, not stubs
 - [ ] `files` context request times out
-- [ ] Cmd/Ctrl+K → "search with AIUI" must carry the query into the expanded chat
+- [x] Cmd/Ctrl+K → "search with AIUI" carries the query — verified live 2026-08-07
 - [ ] ~~More mock content types~~ → **OPERATOR DECISION 2026-08-07: mock content is
       isolated to the demo.archipelago-foundation.org website, NOT in the shipped code.**
-      Re-scoped: build the demo-site content pack as a separate fixture layer; prod drops
-      mock imports, the auto-seeded demo conversation, and `/seed`. See
-      `phases/13-aiui-functional-conversational-node-control-and-content-surf/ASSESSMENT-FIX-PLAN-2026-08-07.md`
-      Wave 1 item 4.
+      Prod bundle is now mock-host-free (8329b826). Remaining: the demo-site content
+      pack as a separate fixture layer (VITE_DEMO_CONTENT=true build).
 
 ## App lifecycle (operator-reported, serious)
 
@@ -66,6 +81,7 @@ Single flat list. Everything open, from operator reports and on-device evidence.
 ## Content / IndeeHub
 
 - [ ] `content.browse-all-peers` needs an OVERALL time budget — >45s is unusable
+      (partially addressed: 20s→45s budget + partial results survive, 9abc1623)
 - [ ] IndeeHub adapter wired but unverifiable here: catalogue is empty (`count: 0`)
 - [ ] IndeeHub `wss://relay.nostr.band` closes before established