Trim Start9 submission list to the prepare.sh gap

Icon-render and the source-available license are intentionally not blockers.

AGENTS.md

@@ -95,10 +95,9 @@ Operator-specific memories at `~/.claude/projects/-Users-macpro-Projects-keysat/
 - `riscv` build target is unverified and not declared in the manifest; the wrapper `Makefile`
   now pins `ARCHES` to `x86 arm` so no target (even a bare `make`) attempts it. Revisit only if
   a riscv StartOS target appears.
-- StartOS Community Registry submission is **BLOCKED** (needs a `prepare.sh`; plus icon-render
+- StartOS Community Registry submission — remaining gap is a `prepare.sh` for the clean-Debian
-  and source-available-license questions to confirm with Start9) — detail in ROADMAP. Criteria
+  first build (plus the on-box manual verification); functional criteria otherwise pass. Detail
-  themselves still unpublished; reach out when ready.
+  in ROADMAP. Submission criteria themselves still unpublished; reach out when ready.
-- Registry icon doesn't render in the StartOS marketplace (see `guides/startos-packaging.md`).
 - Split `audit:read` out of the blanket `:read` scope into its own tier so a
   Read-only scoped key can read dashboards/licenses but NOT the full audit log
   (`api/api_keys.rs::Role::grants`). Deferred from the scoped-keys session.
@@ -125,9 +124,9 @@ Operator-specific memories at `~/.claude/projects/-Users-macpro-Projects-keysat/
   landing SDK snippets + tier-card fallback prices; docs change-tier example + install-step resequence;
   Makefile pins `ARCHES=x86 arm`. No daemon source touched.
 
-- **Start9 Community Registry: BLOCKED** — functional criteria pass; needs `prepare.sh` + icon-render +
+- **Start9 Community Registry:** functional criteria pass; remaining gap is a `prepare.sh` for the clean-Debian
-  source-available-license sign-off from Start9 (ROADMAP). (Note: `registry.keysat.xyz` works as a marketplace
+  first build (+ on-box verification) (ROADMAP). (Note: `registry.keysat.xyz` works as a marketplace on a Start9
-  on a Start9 box; a plain browser/curl GET 404s **by design** — no HTML page is served there. Not an outage.)
+  box; a plain browser/curl GET 404s **by design** — no HTML page is served there. Not an outage.)
 
 - **Next (priority):** 1) Operator data action (master key): grant `unlimited_merchant_profiles` to Pro/Patron
   on live master (steps in Open TODOs). 2) Delete registry-landing GitHub + Gitea remotes. 3) 3 multi-profile

ROADMAP.md

@@ -32,11 +32,11 @@ Longer-term backlog. Near-term state lives in `AGENTS.md` → Current state.
 ## Packaging & distribution
 
 - Start9 Community Registry submission — a 2026-06-17 spec check found the wrapper passes the functional
-  criteria (manifest, interfaces, health check, backup/restore, BTCPay dep, actions) but submission is BLOCKED
+  criteria (manifest, interfaces, health check, backup/restore, BTCPay dep, actions). Remaining gap before
-  on three items: (1) no `prepare.sh` to set up a clean Debian box for the first build (copy the one from
+  submission: add a `prepare.sh` to set up a clean Debian box for the first build (copy the one from
-  `hello-world-startos`); (2) the registry icon not rendering in the marketplace (may be operator-hosted-only —
+  `hello-world-startos`), then run the on-box manual verification (install / backup / restore / logs).
-  confirm with Start9); (3) `LicenseRef-Keysat-1.0` is source-available but more restrictive than OSI — confirm
+  Submission criteria themselves remain unpublished; reach out to Start9 when ready. (Icon-render and the
-  Start9 accepts it. Email Start9 on (2)+(3) before investing in (1). Submission criteria remain unpublished.
+  source-available license are intentionally not treated as blockers.)
 
 ## Licensing model