Record U4 delivery, review blockers and fixes

Why: the U4 work-state unit was delivered (transport f54c769), the
independent reviewer blocked on a removed/suspended read-visibility flaw
(inherited from U3a) and missing command entries/audit; the repair
transport 7f43da6 fixed both with negative tests.

Evidence: /tmp/pal-u4-verify.json, /tmp/pal-u4-fix3b-run.json.

Impact: task card only.

Refs: plan 2026-10-19-1440 U4; PR #634.

.task/feature-project-access-lifecycle-u4-work-states.md

@@ -37,15 +37,17 @@
 | 时间(UTC) | 命令 | 被测HEAD | exit | 来源 | sha256(16) |
 |---|---|---|---|---|---|
 
+| pal-u4 RDM | 项目/成员工作状态机（work_state、suspended）+ 工作判定 + 管理命令入口 + 审计 + removed/suspended 只读边界的可见性修复 | AGENT-EXECUTION digest | implementation | cursor(配额误报禁用后恢复)→agy(区域/EOF 禁用)→pi(限流)→cursor(--model auto 修复后) | 多轮（详见收据） | cursor(--model auto)＋pi | success×2（f54c769 状态机、7f43da6 review 修复） | 已应用 f54c769、7f43da6 | never | /tmp/pal-u4-run2.json、/tmp/pal-u4-fix3b-run.json |
+
 ## 结果与验证（完成后填写）
 
-- 结果：
+- 结果：U4 已交付（RDM 分支 feature/project-access-lifecycle-u4-work-states @ 7f43da6，已推送）：work_state/suspended 状态机与迁移、工作判定落点、creator 的 close/reopen/suspend/reactivate 命令入口与审计、时间比较与 doc-read 检查并行的只读边界（修掉 Review 指出的“新增可见性”缺陷）。
 - 验证：<结论摘要 PASS/FAIL/SKIP/NOT_RUN 逐项；逐条证据由 make evidence 写入上方证据表>
 - 影响与剩余项：
 
 ## 合入与清理
 
-- Review 记录：NOT_RUN（审阅智能体/平台身份、base/head、结论、问题闭合及重放依据）
+- Review 记录：独立审查（全新 cursor 会话，--model auto 修复后可用）结论 BLOCKED(2)：①removed/suspended 共享读取跳过 doc.read 三查且无时间比较（新增可见性，源自 U3a 基线、U4 扩大）；②状态转换缺命令入口与审计。两项已由 repair（7f43da6）修复并有新增负控测试（TestFormerMemberSliceReadExcludesLaterPublication 等），rdmapp 全量绿、Skip=0。报告 /tmp/pal-u4-review-output.txt。（审阅智能体/平台身份、base/head、结论、问题闭合及重放依据）
 - 冲突记录：NOT_RUN（最新目标同步、冲突处置、组合兼容核验及复审/补测）
 - CI 记录：NOT_RUN（当前 HEAD 完整 SHA、全部必需检查、运行链接、执行身份及 GATE 结果）
 - 合入记录：NOT_RUN（交付授权范围、PR、被核验 HEAD、合入 SHA、目标分支及内容核验）
@@ -89,3 +91,33 @@
   "receipt_path": "/home/weichen/.cache/agent-system-dev/evidence/8dd3dfce03454527c8f4f5c127f50a70bbcefd1ec1cfa912bee25a1a1fed7bb3.json"
 }
 ```
+
+<!-- Local receipt: SELF. Digests detect corruption; they do not authenticate a reviewer or CI. -->
+```json
+{
+  "summary_schema": 1,
+  "source": "SELF",
+  "timestamp": "2026-10-20T06:27:50.962524+00:00",
+  "command": "sh -c 'cd /home/weichen/projects/Agent-System-RDM-wt-pal-u2 && GOWORK=off GOFLAGS=-modfile=/tmp/pal-u3.mod go test ./internal/members/... ./internal/projects/... ./internal/perms/... -count=1 2>&1 | tail -1 && GOWORK=off GOFLAGS=-modfile=/tmp/pal-u3.mod go test ./internal/rdmapp/... -count=1 2>&1 | grep -cE \"^ok\" && GOWORK=off go vet ./internal/members ./internal/projects ./internal/rdmapp && echo VET_OK && git status --porcelain | wc -l'",
+  "exit_code": 0,
+  "cwd": "/home/weichen/projects/Agent-System-Dev-wt-feature-project-access-lifecycle-u4-work-states",
+  "before_head": "607c3c209fd68903086adb868580d175dcbec0d0",
+  "after_head": "607c3c209fd68903086adb868580d175dcbec0d0",
+  "branch": "feature/project-access-lifecycle-u4-work-states",
+  "target_branch": "main",
+  "target_head": "65e4aa39592ed8f11b5385d6665aab6a883ae345",
+  "root_target": "main",
+  "immediate_target": "feature/project-access-lifecycle",
+  "before_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+  "after_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+  "output_tail": [
+    "ok  \tagent-system-rdm/internal/perms\t0.019s",
+    "3",
+    "VET_OK",
+    "0"
+  ],
+  "output_sha256": "0ea9c6e9427f885022bfb5c62cdb746ac8a178a81febea8da3931b995ff9cc58",
+  "receipt_sha256": "28d77a6df794aecb5cb43d8bb8c62195af3d54feb6b8c58f98cf8fea0f9cdb2d",
+  "receipt_path": "/home/weichen/.cache/agent-system-dev/evidence/28d77a6df794aecb5cb43d8bb8c62195af3d54feb6b8c58f98cf8fea0f9cdb2d.json"
+}
+```