fix(gateway): close Phase 3C audit gaps

openspec/changes/phase3c-gateway-audit-remediation/tasks.md

@@ -0,0 +1,23 @@
+## 1. Native Policy and Media
+
+- [x] 1.1 Drive supported immutable policy values into encrypted Apollo ANNOUNCE
+- [x] 1.2 Reject unsupported and capability-mismatched policy before readiness
+- [x] 1.3 Evict oldest incomplete audio FEC state and pass sustained-loss relay regression
+
+## 2. Lifecycle and Telemetry
+
+- [x] 2.1 Close forwarding and report durable state on provider termination and disconnect
+- [x] 2.2 Preserve cleanup-pending on terminal cleanup failure
+- [x] 2.3 Report measured heartbeat egress and required bounded telemetry
+
+## 3. Qualification Path
+
+- [x] 3.1 Add a red-to-green end-to-end production-path smoke gate
+- [x] 3.2 Remove duplicate processing and impairment simulation
+- [x] 3.3 Retain raw processing, impairment, fairness, cap, convergence, and resource observations
+- [x] 3.4 Pass short fixed-profile, impairment, fairness, race, parser fuzz, and resource smoke checks
+
+## 4. Immutable Freeze
+
+- [ ] 4.1 Pin and verify a separately published never-reused Protocol version from an empty cache
+- [ ] 4.2 Freeze all normative inputs and run the corrected Section 7 qualification exactly once