docs: close Phase 6 signal qualification

docs/screenshare-audio-exclusion-plan.md

@@ -10,7 +10,10 @@ The four versioned causal status events are built, validated and committed local
 `5a65f50`. Capture-sink replacement and successful all-channel relinking are built, validated
 and committed locally in PixelPass `d09ee9b`. The Row 1 mutation-edge identity gate and Row
 8d/8e fail-closed construction gates are built, validated and committed locally in PixelPass
-`6be07ef`.
+`6be07ef`. The independent Row 6 refusal gates (`956534f`) and revised Row 9 partition
+(`7b11827`) complete the deterministic link-manager matrix. The production-path three-arm AEC
+leak qualification is built, validated and committed locally in PixelPass `e027bc6`; **Phase 6
+is complete and Phase 7 is the current implementation front.**
 **Date:** 2026-08-21 (v1: 07-19 · v2: 07-20 · Option C 07-20 · v3.1 r4 · v3.2 r5 · v3.3 r6 ·
 v3.4 r7 · v3.5 r8 · v3.6 r9 · v3.7 r10 · v3.8 r11 2026-08-21)
 **Origin:** Joe's suggestion — "whitelist all audio except audio coming from peerspeak."
@@ -1428,10 +1431,23 @@ is 345 passed and 12 ignored; strict Clippy, all three serialized live Phase 6 m
 diagnostics and residue checks pass. This completes the deterministic link-manager matrix, not
 Phase 6's separate live signal qualification.
 
-1. **Continue Phase 6:** build and run the production-path three-arm AEC leak measurement re-run,
-   keeping its deliberately naive positive control behind a test-only seam.
-2. Preserve the new live mutation slice's ownership, serial-revalidation, fail-closed,
-   exact-channel, all-links-active and crash-cleanup gates while finishing the phase.
+PixelPass commit `e027bc6` completes Phase 6's separate live signal qualification. Its
+deliberately unsafe predicate is wholly `#[cfg(test)]` and re-admits only the exact configured
+`aec-identity` candidate. The live test drives the hidden selector through the real sink,
+observer, taint controller, native link manager and Pulse monitor recording path; filters
+`media.class` before the exact module ID; preserves child stderr; and verifies the intended
+links in PipeWire before recording with `parec`.
+
+Two complete runs kept the guarded 1500 Hz result at or below the run's control floor within the
+declared 3 dB tolerance, while the naive arm captured 1500 Hz at desktop level and at least 18 dB
+above control and guarded. The supported result is **no incremental 1500 Hz energy detectable
+above the control floor at this analysis resolution**, not proof of absence. Full validation is
+346 passed and 13 ignored; strict Clippy, all four serialized Phase 6 live audio gates,
+`pixelpass --doctor` and residue checks pass.
+
+1. **Continue with Phase 7:** publish the mode selector and versioned capability from PixelPass,
+   preserving the old-PeerSpeak/new-PixelPass compatibility gate.
+2. Then complete Phase 8's capability-gated PeerSpeak argv, picker, UI and causal status path.
 
 Still owed beyond that, unchanged: the §9.2 rig upgrade before any exclusion claim is
 published, and **field-test §12** — nothing in this design has been tested over the real