docs(hux): record Wave-A live gate evidence

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BvMSXH8VH2tMWXanb8SJdf

docs/hux/HANDOFF.md

@@ -387,3 +387,15 @@ Foundation canary LIVE and verified on hermes-chat-tenant-3:
 - Retention scheduler reports disabled until hux.privacy is enabled (by design).
 
 Next: Wave-A canary flags (activity_timeline, projects, privacy, memory_control) on ordinal 3, lifecycle gates per card, then widen partition.
+
+
+## Wave-A live gates (2026-08-24 ~09:12 UTC) — PASS
+
+Canary rolled to ee330822 flags; restart persistence PROVEN (context-key and
+subject hashes identical across the roll). Live lifecycle 13/13 on the
+canary loopback: capabilities advertise exactly HUX-01/02/03/10/11; real
+project + conversation created; worker-emitted event readable by relay;
+memory proposed -> approved -> forgotten with the tombstone effective in the
+listing; privacy policy served; conversation forget tombstones the record;
+retention scheduler enabled and healthy. Next: Wave-B flags (artifacts,
+research, friendly_modes, multimodal, onboarding) on the canary.

services/hermes/chat-statefulset.yaml

@@ -587,7 +587,7 @@ spec:
             - {name: HUX_BIND, value: 127.0.0.1}
             - {name: HUX_PORT, value: "8790"}
             - {name: HUX_DATA_ROOT, value: /var/lib/hux/store}
-            - {name: HUX_FLAGS, value: 'hux.foundation,hux.activity_timeline,hux.projects,hux.privacy,hux.memory_control'}
+            - {name: HUX_FLAGS, value: 'hux.foundation,hux.activity_timeline,hux.projects,hux.privacy,hux.memory_control,hux.artifacts,hux.research,hux.friendly_modes,hux.multimodal,hux.onboarding'}
             - {name: HUX_RELAY_KEY_FILE, value: /run/hermes-webui-hux/relay-key}
             - {name: HUX_WORKER_KEY_FILE, value: /run/hermes-hux-worker/worker-key}
             - {name: HUX_SUBJECT_BINDING_FILE, value: /var/lib/hux/binding/subject}