---
id: w7/m5/t008
title: Closeout — DoD verified, milestone moved to done/
worker: worker7
status: done
estimate: 15m
depends_on: [w7/m5/t007]
---

## Objective

Close the milestone once its definition of done actually holds — a public KeyValue with a non-empty `ipAllowList` only accepts connections from the listed CIDRs, the field round-trips on all four surfaces, and the dashboard Networking section edits it.

## Context

- Close only when the DoD is observably real (allowlist enforced on a real public Valkey route; not merely code-complete).
- Follow the closeout mechanics in `.claude/commands/pm.md` (`done` subcommand step 4).

## Steps

1. Confirm the DoD: a public KeyValue with `ipAllowList` rejects an off-list source and accepts an on-list one; REST/GraphQL/MCP/dashboard all round-trip the field.
2. Set every remaining task `status: done`, mark all rows `— **DONE**`, set `**Status:** done` in this README.
3. Move each `tNNN.md` to `w7/m5/done/`, then move the whole `w7/m5/` dir to `w7/done/m5/` and check `- [x]` in the w7 README.

## Files

- `.pm/w7/m5/**`, `.pm/w7/README.md`

## Acceptance criteria

- [ ] DoD verified: allowlist enforced on a real public route; field round-trips on all four surfaces.
- [ ] Milestone moved to `w7/done/m5/`; w7 README box checked.

## Out of scope

- Any new implementation (must be complete before this runs).
