---
id: w7/m4/t006
title: Closeout — DoD verified, milestone moved to done/
worker: worker7
status: done
estimate: 15m
depends_on: [w7/m4/t005]
---

## Objective

Close the milestone once its definition of done actually holds — not merely when the code is written. On a prod-shaped cluster, tenant→metadata and tenant→node-IP are blocked, external egress still works, and `verify-tenant-isolation.sh` exits 0.

## Context

- Close only when the DoD is observably real (the verify script proves the extended matrix on a real cluster).
- Follow the closeout mechanics in `.claude/commands/pm.md` (`done` subcommand step 4).

## Steps

1. Confirm the DoD: run `scripts/verify-tenant-isolation.sh` on the prod-shaped cluster → exit 0 with the new DENY probes.
2. Set every remaining task `status: done`, mark all rows `— **DONE**`, set `**Status:** done` in this README.
3. Move each `tNNN.md` to `w7/m4/done/`, then move the whole `w7/m4/` dir to `w7/done/m4/` and check `- [x]` in the w7 README.

## Files

- `.pm/w7/m4/**`, `.pm/w7/README.md`

## Acceptance criteria

- [ ] DoD verified on a real cluster (verify script exit 0 with metadata + node DENY probes).
- [ ] Milestone moved to `w7/done/m4/`; w7 README box checked.

## Out of scope

- Any new implementation (must be complete before this runs).
