fix: Oracle review 4 — all remaining issues resolved

1. KWin || true removed from sed commands (lines 53-57)
2. docs/07: RELIBC-COMPLETENESS+IMPLEMENTATION → KERNEL-IPC-CREDENTIAL
3. docs/README: v2.0 note → v4.0, date 2026-04-18 → 2026-05-01
4. local/AGENTS.md: v2.0 reference → v4.0
5. redox-drm: virtio-gpu (0x1AF4) added to auto-probe filter
   + P5-virtio-auto-probe.patch wired in recipe.toml
6. KWin cmake configs kept (downstream dependency, not KWin stub)

local/AGENTS.md

@@ -370,8 +370,8 @@ When mainline updates affect our work:
 ## PLANNING NOTES
 
 - `docs/07-RED-BEAR-OS-IMPLEMENTATION-PLAN.md` is the canonical public execution plan.
-- `local/docs/CONSOLE-TO-KDE-DESKTOP-PLAN.md` (v2.0) is the canonical desktop path plan from console to
-  hardware-accelerated KDE Plasma on Wayland, using a three-track Phase 1–5 model.
+- `local/docs/CONSOLE-TO-KDE-DESKTOP-PLAN.md` (v4.0) is the canonical comprehensive plan —
+  supersedes all individual subsystem docs. See it for current state, blockers, and roadmap.
 - `local/docs/WAYLAND-IMPLEMENTATION-PLAN.md` is the canonical Wayland subsystem plan beneath the
   desktop path. Use it for Wayland-specific stability, completeness, ownership, and runtime-proof
   sequencing.

local/patches/redox-drm/P5-virtio-auto-probe.patch

@@ -0,0 +1,16 @@
+diff --git a/local/recipes/gpu/redox-drm/source/src/main.rs b/local/recipes/gpu/redox-drm/source/src/main.rs
+index 612a64e0f..f4abdc7bb 100644
+--- a/local/recipes/gpu/redox-drm/source/src/main.rs
++++ b/local/recipes/gpu/redox-drm/source/src/main.rs
+@@ -168,9 +168,9 @@ fn select_gpu_from_args() -> Result<PciDeviceInfo> {
+         .map_err(|e| DriverError::Pci(format!("PCI scan failed: {e}")))?;
+     let first = devices
+         .into_iter()
+-        .find(|d| d.vendor_id == PCI_VENDOR_ID_AMD || d.vendor_id == PCI_VENDOR_ID_INTEL)
++        .find(|d| d.vendor_id == PCI_VENDOR_ID_AMD || d.vendor_id == PCI_VENDOR_ID_INTEL || d.vendor_id == 0x1AF4)
+         .ok_or_else(|| {
+-            DriverError::NotFound("no AMD or Intel GPU found via scheme:pci".to_string())
++            DriverError::NotFound("no AMD, Intel, or VirtIO GPU found via scheme:pci".to_string())
+         })?;
+     let mut pci = PciDevice::open_location(&first.location)
+         .map_err(|e| DriverError::Pci(format!("failed to open GPU {}: {e}", first.location)))?;

local/recipes/gpu/redox-drm/P5-virtio-auto-probe.patch

@@ -0,0 +1,16 @@
+diff --git a/local/recipes/gpu/redox-drm/source/src/main.rs b/local/recipes/gpu/redox-drm/source/src/main.rs
+index 612a64e0f..f4abdc7bb 100644
+--- a/local/recipes/gpu/redox-drm/source/src/main.rs
++++ b/local/recipes/gpu/redox-drm/source/src/main.rs
+@@ -168,9 +168,9 @@ fn select_gpu_from_args() -> Result<PciDeviceInfo> {
+         .map_err(|e| DriverError::Pci(format!("PCI scan failed: {e}")))?;
+     let first = devices
+         .into_iter()
+-        .find(|d| d.vendor_id == PCI_VENDOR_ID_AMD || d.vendor_id == PCI_VENDOR_ID_INTEL)
++        .find(|d| d.vendor_id == PCI_VENDOR_ID_AMD || d.vendor_id == PCI_VENDOR_ID_INTEL || d.vendor_id == 0x1AF4)
+         .ok_or_else(|| {
+-            DriverError::NotFound("no AMD or Intel GPU found via scheme:pci".to_string())
++            DriverError::NotFound("no AMD, Intel, or VirtIO GPU found via scheme:pci".to_string())
+         })?;
+     let mut pci = PciDevice::open_location(&first.location)
+         .map_err(|e| DriverError::Pci(format!("failed to open GPU {}: {e}", first.location)))?;

local/recipes/gpu/redox-drm/recipe.toml

@@ -1,6 +1,6 @@
 [source]
 path = "source"
-patches = ["P1-intel-gen-gate.patch", "P2-intel-display-fixes.patch", "P3-intel-gen8-gen9-firmware.patch", "P4-virtio-gpu-driver.patch"]
+patches = ["P1-intel-gen-gate.patch", "P2-intel-display-fixes.patch", "P3-intel-gen8-gen9-firmware.patch", "P4-virtio-gpu-driver.patch", "P5-virtio-auto-probe.patch"]
 
 [build]
 template = "cargo"

local/recipes/kde/kwin/recipe.toml

@@ -51,10 +51,10 @@ done
 
 # Attempt real cmake build with Redox-viable feature set
 sed -i "s/^ecm_install_po_files_as_qm/#ecm_install_po_files_as_qm/" \
-    "${COOKBOOK_SOURCE}/CMakeLists.txt" 2>/dev/null || true
+    "${COOKBOOK_SOURCE}/CMakeLists.txt" 2>/dev/null
 sed -i 's/^ki18n_install(po)/#ki18n_install(po)/' \
-    "${COOKBOOK_SOURCE}/CMakeLists.txt" 2>/dev/null || true
-sed -i '/include(ECMQmlModule)/s/^/#/' "${COOKBOOK_SOURCE}/CMakeLists.txt" 2>/dev/null || true
+    "${COOKBOOK_SOURCE}/CMakeLists.txt" 2>/dev/null
+sed -i '/include(ECMQmlModule)/s/^/#/' "${COOKBOOK_SOURCE}/CMakeLists.txt" 2>/dev/null
 
 rm -f CMakeCache.txt
 rm -rf CMakeFiles