docs(track-a): promote P2 DualConnection egress correction

[blakinio]

Coordinator promotion for researcher Draft #458 / OTC-20260817-track-a-p2-dual-precondition-egress.

Decision: ACCEPT_WITH_EDITS.
Trusted base: main@83034227280dc3bfdf589a991f0fdbbabab7dc87.
Source final head: c3a3d8339a9fb769847011ffb76662688d91f06c.
Execution: static exact-client evidence only; runtime_access:none; no owner-funded AI.

Independent verification covered source run 32016842999, exact-fenced file-only job 95348018877, hosted decode 95348295109, artifacts 9283851546 / 9283858910 and their recorded digests, exact source-head governance 32018496831 = SUCCESS, CI 32018496866 = SUCCESS, final three-file source diff, and empty review/thread inventory.

Promoted bounded result:

• 0xb40370 terminates before 0xb40630; 0xb4066b is not inside the historical DualConnection +0x90 function: DISPROVEN;
• 0xb40630 is a distinct entry: FACT;
• 0xb4066b is a direct QIODevice::write(QByteArray const&) callsite: FACT;
• receiver = b40630 this/rbx, QBuffer/QIODevice-compatible: FACT; concrete dynamic type UNKNOWN;
• payload = original b40630 second argument: FACT;
• direct QTcpSocket sink at 0xb4066b: DISPROVEN;
• reachability from promoted DualConnection +0x78/+0x80 and same-message relationship: UNKNOWN;
• framing, sequence, compression, encryption, final binary egress and final socket ownership remain UNKNOWN.

Initial 0xb4066b final-egress hypothesis is therefore DISPROVEN_IN_STATED_FORM; no replacement sink is invented.

This promotion archives the accepted source task and assigns the next smallest P2 frontier OTC-20260817-track-a-p2-dual-nested-vcall-resolution, limited to resolving receiver/vtable targets for the still-untyped +0x10 calls at 0xb56c93 and 0xb57042 and testing whether either exact edge reaches 0xb40630 while preserving the same-message argument.

E2E: NOT_APPLICABLE — no live client/runtime/network state changed or observed.

Merge only after exact-head required CI/governance and review hygiene pass.