Plan 00085: Complete — merged (dac4f7c) and archived

Live-proved before merge (pinned at branch tip 8fd8725): the PATH fix plus
the underlying PR #33/#34 composition all got past ansible-galaxy and through
playbook-main.yml's Preflight Sanity + DNF Upgrade plays, stopping only at an
unrelated, pre-existing kernel-modules enumeration defect (Plan 00086).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: LTSCommerce

…al-bin/JOURNAL/00085-Journal-26-08-24.md …al-bin/JOURNAL/00085-Journal-26-08-24.mdCLAUDE/Plan/00085-headless-path-local-bin/JOURNAL/00085-Journal-26-08-24.md renamed to CLAUDE/Plan/Completed/00085-headless-path-local-bin/JOURNAL/00085-Journal-26-08-24.md CLAUDE/Plan/00085-headless-path-local-bin/JOURNAL/00085-Journal-26-08-24.md renamed to CLAUDE/Plan/Completed/00085-headless-path-local-bin/JOURNAL/00085-Journal-26-08-24.md

@@ -52,3 +52,27 @@ right after the pipx install/inject block. `bash -n`/`shellcheck -x` clean. Vers
 ## 16:00 · handoff · — — PR opened
 
 Committed and pushed on `plan-00085-headless-path-local-bin`; PR opened against `F44`.
+
+## 16:12 · action · T1.5 — merged, plan complete
+
+Dispatched an independent review agent (`qa-reviewer` stand-in) over PR #35's full diff;
+verdict MERGE-READY WITH NITS, nits addressed (README index row, Task 1.3/1.4 ticked) in
+commit `300269c`.
+
+Then re-proved the fix live, pinned at the branch tip `8fd8725` (lts-infra Plan 00045's
+`verify-github-accounts-none.yml`, prove-before-merge on an unmerged commit — `get_url`
+resolves any sha regardless of branch state). The run got past `ansible-galaxy` and through
+`playbook-main.yml`'s Preflight Sanity and DNF Upgrade plays cleanly — proving both the PATH
+fix AND the underlying PR #33/#34 composition all work together — before hitting an
+unrelated, pre-existing defect in `play-AB-dnf-upgrade.yml`'s kernel-modules enumeration
+(filed as Plan 00086, PR #36). Success criteria met: the failure that remained was not a
+PATH failure.
+
+Checked PR #35's CI: `gitleaks secret scan` was failing, but confirmed via
+`git diff origin/F44...plan-00085-headless-path-local-bin --stat` that the flagged file
+(`CLAUDE/Plan/Completed/00070-.../research/scan-alt-engines.md`) is untouched by this PR, and
+via `gh run list --branch F44` that F44's own tip already fails the same way — a pre-existing
+false positive unrelated to this change, not a merge blocker.
+
+Merged PR #35 (`gh pr merge 35 --merge --delete-branch`, merge commit `dac4f7c`). Plan
+status flipped to Complete and archived to `Completed/`.

…an/00085-headless-path-local-bin/PLAN.md …ed/00085-headless-path-local-bin/PLAN.mdCLAUDE/Plan/00085-headless-path-local-bin/PLAN.md renamed to CLAUDE/Plan/Completed/00085-headless-path-local-bin/PLAN.md CLAUDE/Plan/00085-headless-path-local-bin/PLAN.md renamed to CLAUDE/Plan/Completed/00085-headless-path-local-bin/PLAN.md

@@ -1,6 +1,6 @@
 # Plan 00085: headless path ~/.local/bin PATH gap
 
-**Status**: In Progress
+**Status**: Complete
 **Created**: 2026-08-24
 **Owner**: joseph
 **Priority**: High
@@ -53,13 +53,17 @@ independent blocker at the first bare `ansible-galaxy` call.
 - [x] ✅ **Task 1.3**: commit, push on a branch, open PR against `F44` (PR #35).
 - [x] ✅ **Task 1.4**: independent review (qa-reviewer stand-in) — verdict MERGE-READY
   WITH NITS; nits addressed (README index row added, Task 1.3 ticked).
-- [ ] ⬜ **Task 1.5**: merge.
+- [x] ✅ **Task 1.5**: merge (merge commit `dac4f7c`).
 
 ## Success Criteria
 
-- [ ] A downstream live proof re-run (via `sudo -u`/Ansible `become`, the exact context
-  that found this) gets past the `ansible-galaxy install -r requirements.yml` step and
-  the subsequent `playbook-main.yml` invocation without a PATH-related failure.
+- [x] A downstream live proof re-run (via `sudo -u`/Ansible `become`, the exact context
+  that found this) got past the `ansible-galaxy install -r requirements.yml` step and
+  the subsequent `playbook-main.yml` invocation without a PATH-related failure — proven
+  live before merge (pinned at the branch tip `8fd8725`): pipx-installed `ansible-galaxy`
+  resolved, `playbook-main.yml`'s Preflight Sanity and DNF Upgrade plays both completed.
+  The run then hit an unrelated, pre-existing defect (Plan 00086) in
+  `play-AB-dnf-upgrade.yml`'s kernel-modules enumeration — not a PATH failure.
 
 ## Delivery & Milestones
 

CLAUDE/Plan/README.md

@@ -132,10 +132,10 @@ Use these Unicode icons in plan documents:
 
 - [00082-run-bash-github-accounts-none](00082-run-bash-github-accounts-none/) - Lets `run.bash` headless v1 provision with `RUN_BASH_GITHUB_ACCOUNTS=none`, which previously failed preflight as an unsupported follow-up. Of the two blockers Plan 00063 cited, one is confirmed fixed and the other is recorded NOT REPRODUCIBLE rather than asserted.
 
-- [00085-headless-path-local-bin](00085-headless-path-local-bin/) - A downstream live proof of the composed PR #33/#34 headless mechanisms found a third, unrelated blocker: `ansible-galaxy: command not found` under a non-interactive `sudo -u` invocation, since pipx's `~/.local/bin` shims are never put on PATH there. Exports PATH right after the pipx install block (PR #35).
-
 ## Completed Plans
 
+- [00085-headless-path-local-bin](Completed/00085-headless-path-local-bin/) - A downstream live proof of the composed PR #33/#34 headless mechanisms found a third, unrelated blocker: `ansible-galaxy: command not found` under a non-interactive `sudo -u` invocation, since pipx's `~/.local/bin` shims are never put on PATH there. Exports PATH right after the pipx install block. Merged (`dac4f7c`).
+
 - [00084-port-sudo-password-file-onto-f44](Completed/00084-port-sudo-password-file-onto-f44/) - Ports Plan 00073's `RUN_BASH_SUDO_PASSWORD_FILE` (stranded on an unmerged, diverged branch) onto `F44` so it composes with Plan 00082's `GITHUB_ACCOUNTS=none` — no single commit previously carried both. Merged (`d48fabd`). Also fixed two real VM hostnames from the downstream consumer estate that had been committed into this public repo's tracked content.
 
 - [00083-plan-index-hygiene-and-comment-handlers](Completed/00083-plan-index-hygiene-and-comment-handlers/) - Enables the three handlers the 3.54.0 daemon upgrade shipped disabled (`comment_changelog`, `comment_size`, `sensitive_content`), each after measuring its existing backlog rather than assuming it, and clears the 39 over-length rows the new `index-row-length` check found in this index.