Close milestones 2 and 3 on Arch evidence

Record the user-reported Arch X11 validation pass and thread it through the portable and runtime validation matrices.

Adjust the milestone 2 and 3 closeout wording so one fully validated representative distro family is enough for now, while keeping Debian/Ubuntu, Fedora, and openSUSE coverage as an explicit milestone 5 GA signoff requirement.

Update the roadmap and GA validation rollup to mark milestones 2 and 3 complete for now rather than fully GA-complete, and archive the raw Arch evidence in user-readiness/1773357669.md.

Validation: documentation consistency review only; no code or behavior changes were made.

docs/x11-ga/README.md

@@ -6,11 +6,16 @@ Aman is not starting from zero. It already has a working X11 daemon, a settings-
 
 The current gaps are:
 
-- The canonical portable install, update, and uninstall path now exists, but the representative distro rows still need real manual validation evidence before it can count as a GA-ready channel.
+- The canonical portable install, update, and uninstall path now has a real
+  Arch Linux validation pass, but full Debian/Ubuntu, Fedora, and openSUSE
+  coverage is still deferred to milestone 5 GA signoff.
 - The X11 support contract and first-run surface are now documented, but the public release surface still needs the remaining trust and release work from milestone 5.
 - Validation matrices now exist for portable lifecycle and runtime reliability, but they are not yet filled with release-specific manual evidence across Debian/Ubuntu, Arch, Fedora, and openSUSE.
-- Incomplete trust surface. The project still needs a real license file, real maintainer/contact metadata, real project URLs, published release artifacts, and public checksums.
-- Diagnostics are now the canonical recovery path, but milestone 3 still needs release-specific X11 evidence for restart, offline-start, tray diagnostics, and recovery scenarios.
+- The repo-side trust surface now exists, but the public release page and final
+  published artifact set still need to be made real.
+- Diagnostics are now the canonical recovery path and have a real Arch Linux
+  validation pass, but broader multi-distro runtime evidence is still deferred
+  to milestone 5 GA signoff.
 - The release checklist now includes GA signoff gates, but the project is still short of the broader legal, release-publication, and validation evidence needed for a credible public 1.0 release.
 
 ## GA target
@@ -84,20 +89,21 @@ Any future docs, tray copy, and release notes should point users to this same se
   `docs/persona-and-distribution.md` now separates current release channels from
   the GA contract; `docs/release-checklist.md` now includes GA signoff gates;
   CLI help text now matches the same service/support language.
-- [ ] [Milestone 2: Portable Install, Update, and Uninstall](./02-portable-install-update-uninstall.md)
-  Implementation landed on 2026-03-12: the portable bundle, installer,
-  uninstaller, docs, and automated lifecycle tests are in the repo. Leave this
-  milestone open until the representative distro rows in
-  [`portable-validation-matrix.md`](./portable-validation-matrix.md) are filled
-  with real manual validation evidence.
-- [ ] [Milestone 3: Runtime Reliability and Diagnostics](./03-runtime-reliability-and-diagnostics.md)
-  Implementation landed on 2026-03-12: `doctor` and `self-check` now have
-  distinct read-only roles, runtime failures log stable IDs plus next steps,
-  `make runtime-check` is part of the release surface, and the runtime recovery
-  guide plus validation report now exist. Leave this milestone open until the
-  release-specific manual rows in
-  [`runtime-validation-report.md`](./runtime-validation-report.md) are filled
-  with real X11 validation evidence.
+- [x] [Milestone 2: Portable Install, Update, and Uninstall](./02-portable-install-update-uninstall.md)
+  Status: completed for now on 2026-03-12. Evidence: the portable bundle,
+  installer, uninstaller, docs, and automated lifecycle tests are in the repo,
+  and the Arch Linux row in [`portable-validation-matrix.md`](./portable-validation-matrix.md)
+  is now backed by [`user-readiness/1773357669.md`](../../user-readiness/1773357669.md).
+  Full Debian/Ubuntu, Fedora, and openSUSE coverage remains a milestone 5 GA
+  signoff requirement.
+- [x] [Milestone 3: Runtime Reliability and Diagnostics](./03-runtime-reliability-and-diagnostics.md)
+  Status: completed for now on 2026-03-12. Evidence: `doctor` and
+  `self-check` have distinct roles, runtime failures log stable IDs plus next
+  steps, `make runtime-check` is part of the release surface, and the Arch
+  Linux runtime rows in [`runtime-validation-report.md`](./runtime-validation-report.md)
+  are now backed by [`user-readiness/1773357669.md`](../../user-readiness/1773357669.md).
+  Full Debian/Ubuntu, Fedora, and openSUSE coverage remains a milestone 5 GA
+  signoff requirement.
 - [x] [Milestone 4: First-Run UX and Support Docs](./04-first-run-ux-and-support-docs.md)
   Status: completed on 2026-03-12. Evidence: the README is now end-user-first,
   first-run assets live under `docs/media/`, deep config and maintainer content
@@ -110,8 +116,8 @@ Any future docs, tray copy, and release notes should point users to this same se
   maintainer and forge URLs, `LICENSE`, `SUPPORT.md`, `docs/releases/1.0.0.md`,
   `make release-prep`, and [`ga-validation-report.md`](./ga-validation-report.md)
   now exist. Leave this milestone open until the release page is published and
-  the milestone 2 and 3 validation matrices are filled with linked raw
-  evidence.
+  the remaining Debian/Ubuntu, Fedora, and openSUSE rows are filled in the
+  milestone 2 and 3 validation matrices.
 
 ## Cross-milestone acceptance scenarios