docs: tighten deployment runbooks

docs/production-readiness-roadmap.md

@@ -41,6 +41,8 @@ behavior.
     endpoint ownership live outside the main feature handler module.
   - `[x]` Iroh accept-loop and background live-sync task spawning live outside
     the main feature handler module.
+  - `[x]` Graceful shutdown cancels daemon tasks, closes the shared Iroh
+    endpoint explicitly, and removes the local control socket.
   - `[x]` Runtime state is represented by narrow structs with documented
     ownership and locking rules.
   - `[x]` Existing daemon startup and status tests pass unchanged.
@@ -334,6 +336,14 @@ platform/version details, and evidence for this gate. This phase cannot be
 marked complete from local unit or integration tests alone; it requires two real
 machines and tagged pre-release upgrade evidence.
 
+- `[x]` Prepare the dogfood runbook and evidence format.
+  Acceptance criteria:
+  - `[x]` Runbook commands are checked against the current CLI command tree.
+  - `[x]` Positive paths verify transferred data, not only command exit status.
+  - `[x]` Streaming checks are bounded or have explicit completion criteria.
+  - `[x]` Evidence records capture platform, artifact, version, timestamp,
+    result, and follow-up details without collecting private material.
+
 - `[ ]` Complete two-machine dogfood checklist.
   Acceptance criteria:
   - `[ ]` Fresh install works on at least two real machines.