Finish AUDIT-WP-0005: walk restore and close T06

Logical dump of live audit_core restored locally in 4.1s; counts and
sample triples match the rapp-postgres drill. Retention is platform
backup, not an audit-core deletion window. Workplan finished.

docs/evidence/restore-walk-20260813T121200Z.json

@@ -0,0 +1,36 @@
+{
+  "workplan_task": "AUDIT-WP-0005-T06",
+  "recorded_at": "2026-08-13T12:12:00Z",
+  "path": "logical single-consumer dump of live audit_core, restore into local PostgreSQL 16",
+  "source": "platform-pg-1 / audit_core on railiance01",
+  "destination": "throwaway postgres:16-alpine (127.0.0.1:55446), deleted after verify",
+  "elapsed_seconds": 4.072,
+  "counts": {
+    "events": 21,
+    "dead_letters": 3,
+    "secret_findings": 1,
+    "migrations": 4
+  },
+  "trigger": "events_append_only",
+  "sample_triples_matched": 5,
+  "sample_event_ids": [
+    "ok-1a39fe39",
+    "rot2-45d720f4",
+    "rot2-66c15638",
+    "fm-deliver-a25fd813",
+    "fm-redact-fccd1dd8"
+  ],
+  "matches_platform_drill": true,
+  "platform_evidence": "rapp-postgres/docs/evidence/backup-restore-20260813T111651Z-remote.json",
+  "platform_full_restore_seconds": 51.044,
+  "platform_pitr_seconds": 52.455,
+  "platform_logical_seconds": 3.468,
+  "retention": {
+    "audit_core_retention_days": null,
+    "audit_core_meaning": "does not expire or delete events",
+    "platform_planned_window_days": 30,
+    "production_barman": "fail-closed; no off-host copy yet",
+    "recovery_bound": "platform backup retention, not audit-core deletion"
+  },
+  "verified": true
+}