review: iteration-2 fixes (fragment assertion, evidence paths, hardening)

- build-kernel.sh fragment assertion: survives a missing trailing newline
  (the read footgun, reproduced) and treats an absent symbol on a disable
  line as FATAL, symmetric with the enable arm.
- fetch-kernel-tarball.sh checks the pin before downloading; both fetchers
  add --retry-connrefused.
- mkimage rejects '.'/'..' state keys.
- ui-shot: VM liveness checked before every QMP call, console.log preserved
  as evidence on every failure path, repaint deadline widened to 90s with
  the contended-runner rationale documented.
- rs485-bridge: overflow discards back off one gap and rate-limit their log
  line, mirroring the accept-loop fix; clippy nit fixed.
- .gitignore ignores *.elf/*.map so the untracked artifacts cannot silently
  return; CI shellcheck glob now covers build/ and the rootfs boot scripts
  (directives added for the deliberate in-guest source paths).
- Docs: NPU parity row matches its sibling verification docs; line-pinned
  audit cross-references unpinned; CROSS_COMPILE documented in the build
  header; payload README lists warden-ui; ci-cd tense settled.

Verified: guards negative-tested (bad state keys, no-newline fragment);
boot smoke, portal scenario, ui-shot all PASS; 53 tests green; shellcheck
clean across the widened glob; clippy zero.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018HUayid7W5w7jBdb9Rrj1K

kernel/rv1106-enablement/DRIVER-PARITY.md

@@ -38,7 +38,7 @@ c8a3, not just compiled.
 | GPIO_SYSFS / crypto / CFG80211 | — | mainline (config) | [x] =y (batch2) |
 | AIC8800 wifi (bsp/fdrv) | aic8800_* | **out-of-tree** | [x] M5 — wlan0 up, scanned the site AP at −43dBm (modules, `wifi/VERIFIED-on-c8a3.md`) |
 | AIC8800 BT (btlpm) | aic8800_btlpm | **out-of-tree** | [wip] module built (6.18 vermagic); HCI bring-up not yet exercised |
-| NPU (rknpu, ff660000) | rknpu, ff660000.npu | **out-of-tree** | [wip] M6 built, 0 errors/0 warnings, 99 `rknpu`-prefixed symbols in `System.map`, `&npu {status="okay"}` in the dtb — **not yet flashed/probed on hardware** (build-only session; see `npu/PORT-PROGRESS.md`) |
+| NPU (rknpu, ff660000) | rknpu, ff660000.npu | **out-of-tree** | [x] open GPL driver VERIFIED on hardware — `/dev/dri/card1`, `rknpu_version_test` PASS (power/clock/reset path exercised); open *compute* (regcmd) remains a from-scratch RE project (`npu/VERIFIED.md`, `npu/OPEN-NPU-PLAN.md`) |
 | RGA 2D (rga2) | rga2 | ported (vendor char-dev) | [x] /dev/rga, hw 3.3.87975 |
 | I2S audio (i2s-tdm) | i2s | rv1126 fallback (=y) | [x] cpu DAI registers (part of the card below) |
 | Audio codec (acodec) | rockchip,rv1106-codec | ported (rv1106_codec.c) | [x] card `rv1106-acodec`, pcmC0D0p/c (`audio/`); audible test @ bench |

kernel/rv1106-enablement/mailbox/PLAN.md

@@ -25,7 +25,7 @@ watchdog exactly as-is (different threat model, different job).
 - **Controller (Linux side): non-issue.** `drivers/mailbox/rockchip-mailbox.c` is
   upstream in mainline 6.18 and **already binds on our exact kernel** via the
   generic `rockchip,rk3368-mailbox` **fallback compatible** with **zero patching**
-  — recorded in `CAPABILITIES-AUDIT.md:30`, confirmed by source read. RV1106's DT
+  — recorded in `CAPABILITIES-AUDIT.md`'s Remaining-blocks table (mailbox row), confirmed by source read. RV1106's DT
   declares both instances with that fallback string. Gated today only by
   `status="disabled"` + `CONFIG_ROCKCHIP_MBOX` being absent from the defconfig.
 - **HPMCU firmware (MCU side): we already do the hard part.** WardenOS has a
@@ -241,7 +241,7 @@ adopt rpmsg/virtio unless the payload complexity genuinely demands it.
   moot, since our `hpmcu.rs` is an independent hardware-validated reimplementation.
 
 ---
-_Cross-refs: `../CAPABILITIES-AUDIT.md:30`, `../REMAINING-PORTS.md §7`,
+_Cross-refs: `../CAPABILITIES-AUDIT.md`, `../REMAINING-PORTS.md §7`,
 `../../luckfox-pico-86-panel/riscv-mcu.md`,
 `.../raw/followup-riscv-mcu.md`,
 `flare-edge/major-app-additions/docs/decisions/0002-hpmcu-watchdog.md`,

kernel/rv1106-enablement/npu/OPEN-NPU-PLAN.md

@@ -197,7 +197,8 @@ the whole problem.
 
 `PROVENANCE.md`: the kernel driver is portable GPL; the closed piece is the
 userspace RKNN runtime + regcmd format (a blob). **Per directive we do not ship
-that blob.** `CAPABILITIES-AUDIT.md:32` rates NPU "not worth shipping" until an
+that blob.** `CAPABILITIES-AUDIT.md`'s Remaining-blocks table rates the NPU
+"open driver VERIFIED; compute deferred" until an
 open encoder exists.
 
 ### URLs
@@ -299,5 +300,5 @@ ever begun; otherwise this is the documented reason open NPU compute is deferred
 
 ---
 _Cross-refs: `PORT-PLAN.md` (authoritative file-by-file kernel port),
-`../../docs/npu-graphics-feasibility.md`, `../CAPABILITIES-AUDIT.md:32`,
+`../../docs/npu-graphics-feasibility.md`, `../CAPABILITIES-AUDIT.md`,
 `../PROVENANCE.md`, `../DRIVER-PARITY.md:41`, `../REMAINING-PORTS.md §6`._