Update roadmap status: 7b done; the capability is complete

[Paul Lizer (paullizer)]

Summary

Status update 9 for docs/explanation/features/CHAT_ORCHESTRATION_WORKFLOWS_ROADMAP.md, with paullizer-react-v2-ui at cd333de (0.261.295). Docs only: one file, +57/−14.

• Phase 7: 7b is done in Show workflow hand-offs under a chat answer in V2 (Phase 7b) #1683 (v0.261.295), so Phase 7 is complete. A new bullet records what the V2 hand-off card does:

  • where the card appears and what it shows;
  • Accept, Edit and Decline, each confirmed first, and why an untouched save isn't recorded as an edit;
  • how the card follows the run, with the outcome posted back into the chat;
  • why V2 always waits for approval before a plan's hand-off step;
  • six follow-ups, none blocking.

  The stale "Until 7b ships" note is gone.

• Status: a new paragraph says the capability works end to end in V2. It names the four admin settings, all off by default, and lists what's left as optional: 6c, Phase 8 and the follow-ups. The table now marks 6c and Phase 8 optional.

• Section 9: counting a workspace query's matches before Accept is deferred (Show workflow hand-offs under a chat answer in V2 (Phase 7b) #1683). The card shows the bound instead.

• Repository follow-ups:

  • Show workflow hand-offs under a chat answer in V2 (Phase 7b) #1683 restored harness_build.py and fixed the foundry_consent .gitignore.
  • Two V2 UI tests end with 11 teardown errors, because they don't stub five Settings requests that Bring V2 User Settings to profile parity with an admin-style layout #1691 added.
  • test_open_run_goes_to_the_run_in_its_workspace is flaky.
  • The release-notes integrity note now reads 223 missing releases at 0.261.295.

Linked issue

Refs #1543 #1546 #1549

Release Notes & Latest Features

• New Feature
• Bug Fix
• UI Enhancement
• Breaking Change
• Internal only

Is this visible to end users?

• Yes
• No

Is this admin-facing (Admin Settings, governance, deployment, config)?

• Yes
• No

Should this become a Latest Feature card?

• Yes
• No
• Already added

Screenshot needed for the card?

• Yes
• No
• Attached

Version bump

• application/single_app/config.py VERSION third segment bumped, or not needed because this is docs-only
• deployers/version.txt bumped, or not needed because deployers/ was not changed

Testing / validation

All commands ran at 8367a2b with the pinned venv Python, PYTHONPATH=application/single_app;functional_tests and PYTHONUTF8=1.

Command	Result
python functional_tests\test_docs_app_surface_coverage.py	Passed, 7/7
python functional_tests\test_docs_site_quality.py	Passed, 6/6
python functional_tests\test_docs_link_integrity.py	Failed, 2/5. Pre-existing: base cd333de gives the same counts, with 11 relative links, 15 site page links and 2 features.yml links broken, none in the roadmap.
python functional_tests\test_docs_release_notes_integrity.py	Failed, 0/1. Pre-existing: 223 releases are missing from the generated pages. This PR doesn't touch the release notes.
git diff --check cd333de9d 8367a2b0b	Clean

The new follow-up facts were checked against the repository:

• git log --diff-filter=D shows e65ab0dbc (VERSION 0.261.260) deleted harness_build.py.
• Bring V2 User Settings to profile parity with an admin-style layout #1691 added M365Cards.tsx and FactMemoryBench.tsx, which request the five unstubbed URLs.
• The flaky test timed out on an alert's Open button in 3 of 6 runs alone at 49a52bb5c, during the Show workflow hand-offs under a chat answer in V2 (Phase 7b) #1683 review.

The file keeps CRLF line endings (1,755 CRLF, 0 bare LF) and has no BOM.

Documentation

• Release notes updated, or not needed
• Feature documentation updated, or not needed
• Fix documentation updated, or not needed

Security checklist

• New Flask routes include @swagger_route(security=get_auth_security())
• Settings sent to non-admin frontends use sanitize_settings_for_user()
• Browser JavaScript is served from local SimpleChat static assets only; no CDN-hosted JS
• No secrets, keys, connection strings, or local-only artifacts are included

The first three items don't apply: this PR changes no routes, settings or JavaScript.