docs: renumber PRD 0081 -> 0083 across the reconcile chunk

Follows the base PR's renumber (0081 was already taken; main is on 0082). Update
every `PRD 0081` reference in the gateway-attach code, tests, and ADR 0006, plus
ADR 0006's link to the PRD file. No behaviour change.

Refs #516, #519.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

tests/unit/test_architecture_guardrails.py

@@ -85,7 +85,7 @@ class TestRuntimeModuleSizes(unittest.TestCase):
     def test_backend_contract_does_not_absorb_preparation_logic(self) -> None:
         # base.py holds the backend *contract*; implementation lives elsewhere.
         # The cap is a tripwire against absorbing preparation/impl logic, not a
-        # ban on new contract surface — bumped 580->615 for the PRD 0081
+        # ban on new contract surface — bumped 580->615 for the PRD 0083
         # gateway-attach contract (delegator + 3 abstract primitives; the flow
         # itself lives in backend/gateway_attach.py, not here).
         caps = {

tests/unit/test_backend_secret_reprovision.py

@@ -162,7 +162,7 @@ class TestFirecrackerReprovision(unittest.TestCase):
 
 
 class TestAttachFlow(unittest.TestCase):
-    """PRD 0081 / #519 review: the base backend owns the reconcile flow and
+    """PRD 0083 / #519 review: the base backend owns the reconcile flow and
     fails hard — gather resources, attempt every running bottle, then raise an
     aggregate if any failed (never silently skip)."""
 
@@ -208,7 +208,7 @@ class TestAttachFlow(unittest.TestCase):
 
 
 class TestFirecrackerAttachPrimitive(unittest.TestCase):
-    """PRD 0081: attach_ca_to_agent_vm pushes the current gateway CA into one
+    """PRD 0083: attach_ca_to_agent_vm pushes the current gateway CA into one
     running agent VM over SSH, failing hard."""
 
     def _run_dir(self, root: Path, ip: str = "10.243.0.3") -> Path:

tests/unit/test_docker_infra.py

@@ -70,7 +70,7 @@ class TestDockerInfraService(unittest.TestCase):
 
     def test_cold_boot_reconciles_running_bottles(self) -> None:
         # A (re)created gateway (connect returns True) triggers the bring-up
-        # reconcile so running bottles re-trust the fresh gateway (PRD 0081).
+        # reconcile so running bottles re-trust the fresh gateway (PRD 0083).
         self.gw.connect_to_orchestrator.return_value = True
         self.svc.ensure_running()
         self.attach.assert_called_once_with()

tests/unit/test_firecracker_gateway.py

@@ -63,7 +63,7 @@ class TestFirecrackerGatewayConnect(unittest.TestCase):
                 patch.object(infra_vm, "push_secret") as push:
             cold_booted = gw.connect_to_orchestrator(_ORCH_URL, _TOKEN)
         # The VM is booted fresh here (cold-boot path only), so it always
-        # signals a cold boot → the caller reconciles running bottles (PRD 0081).
+        # signals a cold boot → the caller reconciles running bottles (PRD 0083).
         self.assertTrue(cold_booted)
         # Booted on the gateway link with the gateway role; the orchestrator's
         # guest IP (parsed off the URL) rides the cmdline as bb_orch.

tests/unit/test_firecracker_infra.py

@@ -49,7 +49,7 @@ _ATTACH = (
 class TestEnsureRunning(unittest.TestCase):
     def setUp(self) -> None:
         # The cold-boot branch reconciles running bottles against the fresh
-        # gateway (PRD 0081). Stub it so these composition tests stay isolated
+        # gateway (PRD 0083). Stub it so these composition tests stay isolated
         # from SSH; the wiring itself is asserted in test_cold_boot_reconciles*.
         ap = patch(_ATTACH)
         self.attach = ap.start()

tests/unit/test_macos_gateway.py

@@ -46,7 +46,7 @@ class TestMacosGatewayConnect(unittest.TestCase):
 
     def test_connect_signals_cold_boot(self) -> None:
         # The container is recreated unconditionally, so connect always signals
-        # a cold boot → the caller reconciles running bottles (PRD 0081).
+        # a cold boot → the caller reconciles running bottles (PRD 0083).
         run = Mock(return_value=_proc())
         with patch(f"{_GW}.container_mod") as mod, \
                 patch(f"{_GW}.host_gateway_ca_dir", return_value=Path("/ca")):

tests/unit/test_macos_infra.py

@@ -58,7 +58,7 @@ class TestInfraEnsureRunning(unittest.TestCase):
 
     def test_cold_boot_reconciles_running_bottles(self) -> None:
         # A (re)created gateway (connect returns True) triggers the bring-up
-        # reconcile so running bottles re-trust the fresh gateway (PRD 0081).
+        # reconcile so running bottles re-trust the fresh gateway (PRD 0083).
         self.gw.connect_to_orchestrator.return_value = True
         with patch(f"{_INFRA}.ensure_networks"):
             self.svc.ensure_running()

tests/unit/test_orchestrator_gateway.py

@@ -90,7 +90,7 @@ class TestDockerGateway(unittest.TestCase):
         self.assertEqual([], [c for c in calls if c[:2] == ["docker", "run"]])
         self.assertEqual([], [c for c in calls if c[:2] == ["docker", "rm"]])
         # A healthy current gateway left untouched is not a cold boot — the
-        # bring-up flow skips the running-bottle reconcile (PRD 0081).
+        # bring-up flow skips the running-bottle reconcile (PRD 0083).
         self.assertFalse(cold_booted)
 
     def test_ensure_running_recreates_when_image_is_stale(self) -> None:
@@ -113,7 +113,7 @@ class TestDockerGateway(unittest.TestCase):
         self.assertEqual(1, len([c for c in calls if c[:2] == ["docker", "run"]]))
         self.assertTrue(any(c[:2] == ["docker", "rm"] for c in calls))
         # A recreated container minted/mounted its CA afresh — a cold boot that
-        # triggers the running-bottle reconcile (PRD 0081).
+        # triggers the running-bottle reconcile (PRD 0083).
         self.assertTrue(cold_booted)
 
     def test_ensure_running_starts_the_singleton_when_absent(self) -> None: