docs(jangar): clarify final rollout evidence

[gregkonush]

Summary

• Refreshes the Jangar control-plane release verification note after rebasing the verification branch onto current main.
• Records the current no-go decision for feat(jangar): surface failure-domain lease holdbacks #5454: clean branch and green checks, but the required large-diff Codex review is absent.
• Adds current rollout evidence for image 919848c1, including workload readiness, RBAC limits, dependency-quorum block, and rollback guidance.

Related Issues

None

Testing

• bunx oxfmt --check docs/agents/rollouts/2026-05-05-jangar-control-plane-verify.md
• git diff --check
• kubectl auth whoami
• kubectl auth can-i get applications.argoproj.io -n argocd
• kubectl auth can-i get deployments.apps -n jangar
• kubectl auth can-i get pods -n jangar
• kubectl auth can-i get events -n jangar
• kubectl get pods -n jangar -o wide
• kubectl get pod -n jangar jangar-847d6d7f8d-zx5sq -o jsonpath='{range .status.containerStatuses[*]}{.name} ready={.ready} restarts={.restartCount} imageID={.imageID}{"\n"}{end}{range .status.conditions[*]}condition {.type}={.status} reason={.reason} lastTransition={.lastTransitionTime}{"\n"}{end}'
• curl -fsS http://jangar.jangar.svc.cluster.local/health
• curl -fsS http://jangar.jangar.svc.cluster.local/api/agents/control-plane/status?namespace=agents
• curl -fsS -m 10 http://torghut.torghut.svc.cluster.local/trading/status
• curl -fsS -m 10 http://torghut.torghut.svc.cluster.local/readyz failed with HTTP 503, recorded as rollout risk evidence.
• gh pr checks 5454 -R proompteng/lab
• gh pr view 5454 -R proompteng/lab --json number,title,headRefName,baseRefName,isDraft,mergeStateStatus,reviewDecision,mergeable,commits,statusCheckRollup,reviewRequests,latestReviews,comments,url,body,files
• gh api graphql -f query='query($owner:String!,$repo:String!,$number:Int!){repository(owner:$owner,name:$repo){pullRequest(number:$number){reviewThreads(first:50){totalCount nodes{isResolved}} reviews(first:50){totalCount nodes{author{login} state submittedAt url body}}}}}' -f owner=proompteng -f repo=lab -F number=5454
• gh pr checks 5538 -R proompteng/lab

Screenshots (if applicable)

N/A

Breaking Changes

None

Checklist

• Testing section documents the exact validation performed (or N/A with justification).
• Screenshots and Breaking Changes sections are handled appropriately (removed or filled in).
• Documentation, release notes, and follow-ups are updated or tracked.

[gregkonush]

Status: merged as of 2026-05-05T19:25Z. #5543 was squash-merged at 5030073c9bafedb8da14a866135e2ba8ba3f0699 after all PR checks were pass/skipped only.

Evidence:

• Lint commit messages passed.
• Validate PR title passed.
• The deploy-automerge enable checks skipped as expected for this docs-only PR.
• Scope was limited to docs/agents/rollouts/2026-05-05-jangar-control-plane-verify.md; no runtime manifests changed.

Release gate remains no-go for #5454. #5454 is still clean and CI-green, but the required Codex review for its >1,000-line diff has not posted. Live Jangar remains workload-ready on image 919848c1, but full runtime rollout is not green while dependency quorum is blocked by stale empirical jobs.