P10

docs/ROADMAP.md

@@ -286,16 +286,24 @@ truthful GPU/model-unavailable state.
 
 ## Phase 10 — reliability, privacy, and performance
 
-- [ ] OOM isolation: failed media jobs cannot kill the voice lane.
-- [ ] GPU telemetry: utilization, VRAM, queue wait, load time, tokens/sec,
+- [x] OOM isolation: failed media jobs cannot kill the voice lane.
+- [x] GPU telemetry: utilization, VRAM, queue wait, load time, tokens/sec,
   ASR latency, TTS latency, and dropped audio.
-- [ ] Wake, feedback, Wayland/X11, accessibility, lock/unlock, crash/restart,
+- [x] Wake, feedback, Wayland/X11, accessibility, lock/unlock, crash/restart,
   and nested Shell smoke tests.
-- [ ] Verify no network calls except explicitly enabled model fetch/P2P paths.
-- [ ] Verify no screenshots, microphone buffers, prompts, or transcripts are
+- [x] Verify no network calls except explicitly enabled model fetch/P2P paths.
+- [x] Verify no screenshots, microphone buffers, prompts, or transcripts are
   retained unless the user enables retention.
-- [ ] Audit computer actions with target metadata and screenshot hashes only.
-- [ ] Add graceful restart and state recovery for daemon crashes.
+- [x] Audit computer actions with target metadata and screenshot hashes only.
+- [x] Add graceful restart and state recovery for daemon crashes.
+
+Phase 10 is implemented through `daemon/telemetry.js`, `daemon/recovery.js`,
+`daemon/job-runner.js`, `daemon/network-policy.js`, the privacy log, and the
+computer audit store. Background failures are returned as isolated job results;
+runtime status exposes scheduler counters, latency samples, GPU resources, and
+voice metrics. State checkpoints recover safely to `ARMED` after an interrupted
+turn, and retention checks exclude raw prompts, audio, screenshots, and
+transcripts by default.
 
 Exit gate: the full test matrix passes on supported Ubuntu GNOME sessions with
 GPU inference visibly confirmed.