docs: renumber PRD 0081 -> 0083 across the reconcile chunk

Follows the base PR's renumber (0081 was already taken; main is on 0082). Update
every `PRD 0081` reference in the gateway-attach code, tests, and ADR 0006, plus
ADR 0006's link to the PRD file. No behaviour change.

Refs #516, #519.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

bot_bottle/backend/base.py

@@ -528,7 +528,7 @@ class BottleBackend(ABC, Generic[PlanT, CleanupT, AttachTargetT]):
 
     def attach_bottled_agents_to_gateway(self) -> None:
         """Reconcile every running bottle against the freshly-(re)booted gateway
-        on the cold-boot bring-up path (PRD 0081). The shared flow + fail-hard
+        on the cold-boot bring-up path (PRD 0083). The shared flow + fail-hard
         policy live in `gateway_attach`; backends override only the three
         primitives below (ADR 0006)."""
         from .gateway_attach import reconcile_running_bottles

bot_bottle/backend/docker/backend.py

@@ -54,7 +54,7 @@ class DockerBottleBackend(BottleBackend["DockerBottlePlan", "DockerBottleCleanup
 
     def __init__(self, *, infra: "DockerInfraService | None" = None) -> None:
         # The infra service whose gateway just cold-booted, passed in on the
-        # bring-up reconcile path (PRD 0081) so `_gateway_attach_resources`
+        # bring-up reconcile path (PRD 0083) so `_gateway_attach_resources`
         # reads THAT gateway's CA rather than a fresh default-named service —
         # otherwise a non-default instance (an isolated integration test's
         # `-itest-` gateway) reads the default `bot-bottle-orch-gateway`, which

bot_bottle/backend/docker/gateway.py

@@ -272,7 +272,7 @@ class DockerGateway(Gateway):
         if self._control_network:
             self._connect_control_network()
         # (Re)created a fresh container — signal a cold boot so the caller
-        # reconciles running bottles against it (PRD 0081).
+        # reconciles running bottles against it (PRD 0083).
         return True
 
     def _connect_control_network(self) -> None:

bot_bottle/backend/docker/infra.py

@@ -147,7 +147,7 @@ class DockerInfraService(InfraService):
         )
         # A (re)created gateway container minted/mounted its CA afresh and lost
         # every bottle's per-bottle state; reconcile the already-running bottles
-        # against it (PRD 0081). Skipped when a healthy current gateway was left
+        # against it (PRD 0083). Skipped when a healthy current gateway was left
         # untouched — no cold boot, nothing to reconcile.
         if cold_booted:
             from .backend import DockerBottleBackend

bot_bottle/backend/docker/infra_launch.py

@@ -83,7 +83,7 @@ def running_agent_containers(
 ) -> list[str]:
     """Every running agent container on the gateway `network` (the gateway
     itself excluded) — the bottles the bring-up reconcile attaches to the fresh
-    gateway (PRD 0081). Raises `OSError` if `docker` can't be run (fail hard: a
+    gateway (PRD 0083). Raises `OSError` if `docker` can't be run (fail hard: a
     reconcile that can't list its bottles must not look like "no bottles")."""
     proc = run_docker([
         "docker", "network", "inspect", "--format",
@@ -98,7 +98,7 @@ def running_agent_containers(
 def push_ca_to_container(container: str, ca_pem: str) -> None:
     """(Re)attach one running agent container to the current gateway: replace
     its trusted gateway CA with `ca_pem` and rebuild its trust store via
-    `docker cp` + `docker exec` (PRD 0081). Unconditional install — there is one
+    `docker cp` + `docker exec` (PRD 0083). Unconditional install — there is one
     gateway, so no fingerprint match is needed.
 
     Fail hard: raises `InfraLaunchError` (naming the container) on any failure —

bot_bottle/backend/firecracker/infra.py

@@ -73,7 +73,7 @@ class FirecrackerInfraService(InfraService):
             # The fresh gateway rootfs minted a new CA and lost every bottle's
             # git-gate/token state; reconcile the already-running bottles against
             # it so a gateway rebuild doesn't silently break their egress
-            # (PRD 0081). Cold-boot only — the adopt fast-paths above never reach
+            # (PRD 0083). Cold-boot only — the adopt fast-paths above never reach
             # here, so a healthy current gateway is left untouched.
             if cold_booted:
                 from .backend import FirecrackerBottleBackend

bot_bottle/backend/firecracker/infra_launch.py

@@ -90,7 +90,7 @@ def persist_env_var_secret(private_key: Path, guest_ip: str, secret: str) -> Non
 def attach_ca_to_agent_vm(run_dir: Path, ca_pem: str) -> None:
     """(Re)attach one running agent VM (identified by its `run_dir`) to the
     current gateway: replace its trusted gateway CA with `ca_pem` and rebuild
-    its trust store over SSH (PRD 0081). Unconditional install — there is one
+    its trust store over SSH (PRD 0083). Unconditional install — there is one
     gateway, so no fingerprint match is needed. Bare-pipe input keeps the cert
     off argv.
 

bot_bottle/backend/gateway_attach.py

@@ -1,4 +1,4 @@
-"""The shared gateway-attach reconcile flow (PRD 0081).
+"""The shared gateway-attach reconcile flow (PRD 0083).
 
 `BottleBackend.attach_bottled_agents_to_gateway()` delegates here so every
 backend reconciles running bottles against a freshly-booted gateway *the same
@@ -21,7 +21,7 @@ if TYPE_CHECKING:
 @dataclass(frozen=True)
 class GatewayAttachResources:
     """Everything a running bottle needs to (re)attach to the current gateway on
-    a cold boot (PRD 0081). Gathered once per reconcile and handed to every
+    a cold boot (PRD 0083). Gathered once per reconcile and handed to every
     bottle. The CA now; egress secrets and git-gate state join as the reconcile
     grows (#516)."""
 

bot_bottle/backend/macos_container/gateway.py

@@ -112,7 +112,7 @@ class MacosGateway(Gateway):
 
         Always returns True: this recreates the gateway container unconditionally
         (a cold boot), so the caller reconciles running bottles against it
-        (PRD 0081)."""
+        (PRD 0083)."""
         self._orchestrator_url = orchestrator_url
         self._gateway_token = gateway_token
         # Fail closed on a missing policy source or token: the resolver-only data

bot_bottle/backend/macos_container/infra.py

@@ -142,7 +142,7 @@ class MacosInfraService(InfraService):
             url, orchestrator.mint_gateway_token())
         # A (re)created gateway container minted/mounted its CA afresh and lost
         # every bottle's per-bottle state; reconcile the already-running bottles
-        # against it (PRD 0081). Skipped when a healthy current gateway was left
+        # against it (PRD 0083). Skipped when a healthy current gateway was left
         # untouched — no cold boot, nothing to reconcile.
         if cold_booted:
             from .backend import MacosContainerBottleBackend

bot_bottle/backend/macos_container/infra_launch.py

@@ -99,7 +99,7 @@ def ensure_gateway(
 
 def running_agent_containers() -> list[str]:
     """Every running agent container's name — the bottles the bring-up reconcile
-    attaches to the fresh gateway (PRD 0081). Raises `EnumerationError` if the
+    attaches to the fresh gateway (PRD 0083). Raises `EnumerationError` if the
     live set can't be determined (fail hard rather than reconcile a partial
     set)."""
     return [f"{CONTAINER_NAME_PREFIX}{agent.slug}" for agent in enumerate_active()]
@@ -108,7 +108,7 @@ def running_agent_containers() -> list[str]:
 def push_ca_to_container(name: str, ca_pem: str) -> None:
     """(Re)attach one running agent container to the current gateway: replace
     its trusted gateway CA with `ca_pem` and rebuild its trust store via
-    `container cp` + `container exec` (PRD 0081). Unconditional install — there
+    `container cp` + `container exec` (PRD 0083). Unconditional install — there
     is one gateway, so no fingerprint match is needed.
 
     Fail hard: raises `InfraLaunchError` (naming the container) on any failure —