docs(milestone): complete v1.26 Live Pilot Estate Activation (release v1.25.5)

All 13 requirements (REQ-310..322) complete. Live pilot estate activated against AWS
581513795199. Milestone merged to main. Tags v1.25.0..v1.25.5. Checkpoint cleared.

---ci---
project: acdl
phase: 5
milestone: v1.26
status: complete
requirements:
  covered: [REQ-310, REQ-311, REQ-312, REQ-313, REQ-314, REQ-315, REQ-316, REQ-317, REQ-318, REQ-319, REQ-320, REQ-321, REQ-322]
  partial: []
---

.ciagent/CHECKPOINT.json

@@ -1,10 +1,10 @@
 {
-  "phase": 4,
+  "phase": 5,
   "stage": "complete",
   "milestone": "v1.26",
-  "phase_role": "execution",
+  "phase_role": "final",
   "attempts": 0,
-  "updated_at": "2026-08-19T03:30:00Z",
+  "updated_at": "2026-08-19T04:00:00Z",
   "project": "acdl",
   "projects": [
     "acdl",
@@ -12,38 +12,38 @@
   ],
   "active_milestone": "v1.26",
   "milestone_branch": "milestone/v1.26-pilot-activation",
-  "phase_branch": "phase/03-pilot-metrics-and-policies",
+  "phase_branch": "phase/05-final-review-ship",
   "tag_line": "v1.25.x",
-  "previous_phase": {
-    "phase": 3,
-    "tag": "v1.25.3",
+  "current_phase": {
+    "phase": 5,
+    "tag": "v1.25.5",
     "status": "complete"
   },
-  "current_phase": {
+  "previous_phase": {
     "phase": 4,
     "tag": "v1.25.4",
     "status": "complete"
   },
   "requirements": [
+    "REQ-310",
+    "REQ-311",
+    "REQ-312",
+    "REQ-313",
+    "REQ-314",
+    "REQ-315",
     "REQ-316",
-    "REQ-321"
+    "REQ-317",
+    "REQ-318",
+    "REQ-319",
+    "REQ-320",
+    "REQ-321",
+    "REQ-322"
   ],
-  "waves": {
-    "W0": "Gitea adapter \u2014 inline checkout-then-call in consumer deploy.yml (SPEC \u00a710 Q1 resolved, consumer repo)",
-    "W0.5": "kyverno-json substrate fix (v1.25 skip-masked bug) + P2 drift (dynamodb examples, sync_workflows, deck path)",
-    "W2": "outcome backfill (REQ-317) + escalation_reason (REQ-318)",
-    "W3": "env-JSON state_backend wiring (REQ-319) \u2014 dev bound to 581513795199",
-    "W4": "pilot-readiness (REQ-320) + settlement-finality (REQ-315) kyverno-json policies \u2014 run against real kj",
-    "W5": "CAP-025 live-pilot-apply regression check (REQ-316)",
-    "W6": "deploy.yml drift fixes \u2014 AWS_DEFAULT_REGION from secret, ref v1.25, no raw NOVA_AWS_* in shell env (SPEC \u00a75.1/\u00a75.2)",
-    "W7": "secret rotation scheduled workflow (SPEC \u00a75.9) + forge-agnostic token name (REQ-230)"
+  "milestone_complete": true,
+  "milestone_release": {
+    "tag": "v1.25.5",
+    "release_id": 791,
+    "url": "https://git.cloudinit.dev/continuous-intelligence/acdl/releases/tag/v1.25.5"
   },
-  "pre_run": {
-    "flaky_test_fixed": "8c68d68 test(metrics): fix attestation-event test freshness time-bomb",
-    "acdl_to_nova_migration": "f844fea chore(bootstrap): migrate ACDL_* env vars to NOVA_*",
-    "aws_bootstrap": "S3 nova-tfstate-581513795199-us-east-1 + DynamoDB nova-outbox created (idempotent, account 581513795199)",
-    "consumer_repo_created": "continuous-intelligence/nova-blockchain-exchange (Gitea, private, init, cloned to /root/nova-blockchain-exchange)",
-    "kj_installed": "kyverno-json v0.0.3 via go install (binary kyverno-json symlinked as kj) \u2014 policy tests run, not skipped"
-  },
-  "notes": "v1.26 P4 complete. W1 live terraform apply against 581513795199 succeeded (ALB + ECS + DynamoDB + S3). Decision Ledger: ai.decision.made + nova.outcome.backfilled (outcome pending->succeeded, REQ-317). 2 module-completeness gaps fixed (ecs-service execution_role_arn, ALB SG). W2 docs (REQ-321). 844 platform + 90 consumer tests green. Ready for P5 final review + milestone ship."
+  "notes": "v1.26 COMPLETE. 13 requirements (REQ-310..322). 5 phases. Live apply against 581513795199 succeeded. Confidence 0.800 pass. fact_decision.outcome=succeeded (REQ-317). Hash chain valid. Milestone merged to main. Next run starts a new milestone."
 }