docs(recovery): record runner live reclose readback [skip ci]

docs/LOGBOOK.md

@@ -19,6 +19,20 @@
 
 **邊界**：沒有讀 runner token / secret / raw session / SQLite / auth / `.env`；沒有重啟 Docker / Nginx / firewall / K3s / DB；沒有打開 legacy / generic runner；沒有 force push；沒有使用 GitHub。
 
+## 2026-06-28 — 19:31 110 runner drain lane 再次 re-close 與 cold-start 讀回
+
+**背景**：本輪 runner / StockPlatform smoke source 收斂後重跑 `full-stack-cold-start-check.sh`，首次讀回 110 又出現外部 opener 將 `awoooi-cd-lane-drain.service` 拉回 `active/enabled`，且 `awoooi-runner-failclosed-enforcer.timer` / `authority.timer` 變成 inactive / disabled；cold-start 結果 `PASS=89 WARN=2 BLOCKED=5`。
+
+**完成內容**：
+- live 110 執行最小 fail-closed re-close：停止 / kill / mask `awoooi-cd-lane*`、direct runner、Gitea runner units；移除 runner sentinels；把 runner / lane binary path 改回 fail-closed stub；恢復 fail-closed enforcer / authority timer unit 與 cron authority。
+- 未讀 `.runner`、runner token、secret、raw session、SQLite、auth 或 `.env`；未重啟 Docker / Nginx / firewall / K3s / DB；未打開 legacy runner 或 controlled drain lane。
+
+**驗證結果**：
+- 110 readback：`awoooi-cd-lane-drain.service` `LoadState=masked ActiveState=inactive UnitFileState=masked MainPID=0`，lane process `0`。
+- timer 二次讀回：`awoooi-runner-failclosed-authority.timer` / `enforcer.timer` `ActiveState=active UnitFileState=enabled Result=success`；兩個 service `Result=success ActiveState=inactive MainPID=0`。
+- P3 gate：`PASS=38 WARN=3 BLOCKED=0`，`CD_LANE_GUARDRAILS_OK 1`，`BAD_RUNNER_GUARDRAILS 0`，`NO_ACTIVE_JOB_CONTAINERS`。
+- full cold-start：`PASS=91 WARN=2 BLOCKED=0`，Result `DEGRADED`；warnings 為 Alertmanager webhook 測試未送與 188 MOMO daily sales source-aware stale，非 runner blocker。
+
 ## 2026-06-28 — 19:10 110 runner push-trigger pressure source guard
 
 **完成內容**：