docs(agents): plan W5 renderer surface ownership

[blakinio]

Purpose

Accept one bounded W5 launch plan for a renderer surface-ownership spike after completed W4.

Live state

• required main: 37c9b3496eef4b7360bf9f5d753491540b5a2727
• W1-W4 completed and archived
• legacy PR fix(assets): select release archives by client version #37/docs(task): archive client assets release selection #83 merged and archived
• open PR feat(ui): prototype Oteryn login shell #23 is legacy UI only; ci: prove official Tibia login without OCR on Synology #48 is isolated operational work
• no active Rust task or PR owns crates/renderer, Cargo/lockfile integration or the renderer-surface contract

Accepted wave

• exactly one implementation worker W5-RENDER;
• one package oteryn-renderer, category renderer;
• narrow apps/client composition preserving main-thread window ownership and deterministic close;
• instance/surface/adapter/device/queue ownership and constant clear/present only;
• deterministic CPU-side unconfigured/configured/suspended/lost/closing state;
• one unique Cargo/lockfile/dependency-policy/shared-document lease after this plan and its archive merge.

Dependency candidates

• exact wgpu 30.0.0, default features disabled, Windows std + dx12 only;
• exact pollster 1.0.1, used only for one synchronous main-thread adapter/device bootstrap;
• exact cargo-deny advisories/licenses/bans/sources remain authoritative and may reject either candidate without policy weakening.

Boundaries

Planning documentation only. No Rust source, Cargo, lockfile, dependency policy, CI, architecture, renderer implementation, assets, shaders, UI, protocol, legacy runtime or external-repository change.

No worker task, implementation branch or shared lease exists until this plan and its separate archive merge.

Interactive Windows presentation, real resize/suspend/loss, GPU/driver/hardware and performance remain explicitly unproven.

Task

OTC-20260729-plan-w5-render-surface

Validation

Exact final head: 66426f9aaa78734bc53a30bc4d8067ec9ea2f622.

• Rust Client run 30457678547: locked metadata, fmt, Clippy, tests, architecture and Supply Chain passed;
• repository CI run 30457679484: all required jobs and CI / Required passed;
• reviewed predecessor head 383e7942e972822b3c05870e820946f266799863 also passed Rust Client run 30457406425 and repository run 30457407027;
• complete five-file path/content/full-diff review passed.

Ready-for-review exact-head checks and final merge gate remain required.