docs(backlog): record egress activation + batch-approval (D) in RETRO

ab7e4be (egress activation) and 4b0024f (batch source-list approval) move to RETRO;
§D is now fully landed except the standalone web-approval client (needs network/SearXNG).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

BACKLOG.md

@@ -33,14 +33,14 @@ matching bullets below are superseded; only the noted follow-ups remain live:
 - **C-A1** brief echo-back gate — `1df7af5` *(follow-up: `planner.md` brief_echo + `role_pipeline` metadata to activate)*
 - **C-A2** stage-level plan checkpointing — `1a1b5cc`
 - **B §4** architect contradiction-check (display-only) — `eae0a0c` *(follow-up: decision emit hook + in-session L3 embedding)*
-- **D** dedicated `SourceFetched`/`LowQualityExtraction` events — `b098d87`; dynamic per-session egress allowlist — `027ff1f` *(follow-up: thread sessionId into `NetworkHostRule`; batch fetch-approval still unbuilt)*
+- **D** dedicated `SourceFetched`/`LowQualityExtraction` events — `b098d87`; dynamic per-session egress allowlist — `027ff1f`, **activated** `ab7e4be` (session state threaded into assessment input); batch source-list fetch-approval — `4b0024f`
 - **B §5** reviewer static-first (runner + event + context-exclusion, live-wired) — `447fc7a` *(follow-up: a stage that emits `StaticFindingsRecordedEvent`)*
 - **G** narration-lane lag — `eff8f8d`
 - **E** tui-go go.mod directive fix — `1e6699a`; markdown rendering — `da72ee5`; session list / resume view — `1f7a5d9`; per-event render-matrix golden tests — `2a99e15`; approval ergonomics (queue + tier-gated confirm) — `d5afcd3`
 
 - **B §2** plan-derived diff manifest — `641051b`
 
-**Remaining (deeper / lower-verifiability):** D batch fetch-approval (approval-flow surgery); H freestyle follow-ups (graph re-route, child-session runner); the 5 dormant follow-up activations (A1 planner prompt, A3 producer, B§4 decision hook, egress sessionId, B§5 static_check stage); §E plan-comparison view + idea-board→profile.
+**Remaining (deeper / lower-verifiability):** H freestyle follow-ups (graph re-route, child-session runner); the dormant follow-up activations (A1 planner prompt, A3 producer, B§4 decision hook, B§5 static_check stage); §E plan-comparison view + idea-board→profile.
 **§E tui-go remaining (UNBLOCKED — Go via `GOTOOLCHAIN=auto` go1.24.2):** plan comparison view; idea-board→profile promotion.
 **Still blocked in this sandbox:** F live-QA gates + D §6 web approval client (need local model / SearXNG / GPU).
 
@@ -105,11 +105,10 @@ web_search (T1) + web_fetch (T2) in `:infrastructure:tools`, `research.toml`
 - [ ] **§6 web approval client** — the one larger unbuilt piece. Third client on the existing
       Ktor REST+WS bus: approval cards + event strip + session list. Behind WireGuard/Tailscale
       only, never public. Independent track (spec ordering #5).
-- [ ] **§3 batch fetch-approval at source-list level** — currently per-fetch T2; operator
-      should approve the source list once, not each URL.
-- [ ] **Dedicated `SourceFetched` / `LowQualityExtraction` events** — quality +
-      content_sha256 currently ride inside `ToolExecutionCompletedEvent` metadata only.
-- [ ] **Dynamic per-session egress allowlist** — currently static `networkAllowedHosts` + T2 gate.
+- [x] **§3 batch fetch-approval at source-list level** — `4b0024f`. `POST /sessions/{id}/approve-sources`
+      → one `EgressHostsGrantedEvent` for the whole list. → RETRO.
+- [x] **Dedicated `SourceFetched` / `LowQualityExtraction` events** — `b098d87`. → RETRO.
+- [x] **Dynamic per-session egress allowlist** — `027ff1f`, activated `ab7e4be`. → RETRO.
 - [ ] **Fresh-machine runtime install** — copy `research.toml` + `prompts/` + `schemas/` and
       the `[[artifacts]]` / `[tools.research]` config entries into `~/.config/correx`
       (already done on this box; repo source is `examples/workflows/` + `docs/schemas/`).