docs(changelog): resolve the stale Phase 0 deliverables section

[MatejGomboc]

Summary

docs/CHANGELOG.md's "Outstanding Phase 0 deliverables" section still read "One remains:" with the threat-model.md bullet un-struck. That has been stale since PR #5 landed the threat model, and it contradicted both the constitution's status line ("Phase 0 is complete") and this same changelog's own Added entry, which calls the threat model "the last Phase 0 deliverable". The bullet is now struck through the way the Borrow Ledger one already is, and the intro sentence says both items are done.

Explanation for the maintainer

Two lines change, nothing else. The section's intro goes from "One remains:" to "Both are done — Phase 0 is complete, as the constitution's status line records:", and the threat-model bullet gains the same strikethrough-plus-"done" treatment as its Borrow Ledger sibling, pointing at the Added entry above it. A repo-wide grep for "Phase 0"/"outstanding" confirms this was the last place in the repository still implying Phase 0 had an open item; CONSTITUTION.md's status line, docs/threat-model.md's own status field, and the changelog's Added section all already agree.

Which pillar does this serve?

Toil (documentation housekeeping) — though in the spirit of the changelog's own preamble: a record of project law that misstates the project's state is the first place a reader loses trust.

If this changes a document or the constitution

• Cross-references still resolve; no clause is left contradicting another (grep sweep of "Phase 0" and "outstanding" across all Markdown)
• Not a constitution amendment; docs/CHANGELOG.md is itself the file corrected
• No section other documents cite has been renumbered

Borrow Ledger

• I checked the Borrow Ledger (CONSTITUTION.md §4) for this subsystem
• The verdict for this subsystem is: n/a (documentation)
• Vendored code retains its original licence notices; new files carry an SPDX header (no files added)

unsafe register

• New unsafe blocks: None
• Every new unsafe block carries a // SAFETY: comment (n/a)
• Every unsafe block is inside a module CONSTITUTION.md designates for it (n/a)
• I have listed them in the session summary / PR description above

Checklist

• Builds for both Tier-1 targets — no Rust touched; CI re-proves it
• Clippy passes — no Rust touched; CI re-proves it
• Formatted — no Rust touched
• Toolchain pins agree (bash .github/scripts/check-toolchain-pin.sh — clean locally)
• British spelling (bash .github/scripts/check-british-spelling.sh — clean locally)
• Markdown is lint-clean (markdownlint-cli2 on the changed file — 0 issues)
• Boots in QEMU where applicable (n/a)
• CHANGELOG.md updated under [Unreleased] — n/a: this PR corrects the documents' changelog itself; it records no document amendment
• Commit messages follow Conventional Commits (see CONTRIBUTING.md)

Related

Found during a full repository familiarisation pass, 2026-08-01.

🤖 Generated with Claude Code