android: the handoff — the pending rounds, the pipeline, and what is unverified

Everything written this session that has not been through the device: rounds 43
to 48 (each patch adversarially verified, 43's transient-notice expectation
fixed), a partial round 49, the pipeline scripts, the Android Auto design and
the icon comparison mock. Also the two harness changes that were never A/B'd —
adaptive waits, which may only shorten a declared wait and never lengthen it,
and a ship that runs the mock walk and the deploy at the same time. The A/B and
its 255-step baseline are in handoff/tools; main stays at what the phone has
actually walked.

handoff/README.md

@@ -0,0 +1,19 @@
+# handoff/ — the Android port's pending work
+
+Saved 2026-09-14 when the session ended. Nothing here is on `main`; `main` holds
+only rounds that were built, walked on the device and committed.
+
+- `rounds/` — every round's patch script and commit message, and the insertion
+  files they read. **Rounds 43 to 48 are written and verified but not yet
+  shipped**; 49 is incomplete (authoring was stopped mid-flight). The earlier
+  ones are kept because a patch is the record of how a round was made.
+- `tools/` — the pipeline. `preflight.sh` applies a wave in order to a throwaway
+  copy; `chain.sh` patches and ships a list of rounds; `reset-tree.sh` puts the
+  tree back after a failure (a plain `git checkout --` leaves new files behind
+  and trips the round's own re-run guard); `compare-walks.sh` and
+  `baseline-mock-steps.txt` are the A/B for the unverified adaptive-wait change;
+  `audit-commands.cjs` lists backend commands the phone never calls.
+- `notes/` — the Android Auto design in full, and the icon background comparison
+  mock (open `icon-mock.html` directly; it needs no server).
+
+Start with `../HANDOFF-2026-09-14-android-auto-and-icon.md`.