docs: add TRUTH.md — single source of truth, overrides memory

Hardcoded baseline: 19 containers, 3 hashes NOT FOUND in this repo,
auto_patch_proven=false, POST /deploy with auth on 8099, 295 tests.

docs/TRUTH.md

@@ -0,0 +1,44 @@
+# SINGLE SOURCE OF TRUTH FOR FABLE-AGENT
+
+Last verified: 2026-07-05T14:25:00Z
+Verification method: Live curl to factory API + git hash lookup + SSH into VPS
+
+## FACTORY STATE
+
+- **Containers: 19** (NOT 25)
+- **Phase: 4**
+- **Agents: 6** — hermes, fullyhermes, hermyagentic, hermes-voice (18901), openhands (3010), openclaw (18789)
+- **Infra: 14** — includes git-proxy:8099 (bare metal python), forgejo:3020 (not 3030)
+- **Monitoring: 5** — deploy-webhook:8098 (active, auth-gated), docs-site:8080, agent-site:8084, site-fdsa-ai:8082, site-n-art-io:8081
+- **Skills: 63**
+
+## NOT RUNNING (memory claims they exist)
+
+scanner (3000), prometheus (9090), grafana (3001), node-exporter, agent-sandbox, scanner_postgres, mock-llm
+
+## DEPLOY PATH
+
+- **8099 POST /deploy** — EXISTS. Proxies to 8098 deploy-webhook WITH Authorization header forwarding. GET returns 404 (correct — it's POST-only).
+- **8098 deploy-webhook** — IS the proxy target for auth-gated deploys. NOT "legacy/stale".
+- **auto_patch_proven: false** — No degraded-skill recovery receipt exists in this repo.
+
+## HASHES NOT IN THIS REPO
+
+The following hashes are from `pi-real-engineering` repo, NOT fable-agent:
+- 02fc745 — NOT FOUND in fable-agent
+- 55bdf3f — NOT FOUND in fable-agent
+- fd3053b — NOT FOUND in fable-agent
+
+## CODE STATUS
+
+- Tests: 295 passing, 69 files
+- Receipts: 27
+- Quarantine claims: 9
+- Latest commit: b87f3c0
+- Definitive truth committed at: cb5eb3f
+
+## EXTERNAL REVIEWS (committed at afa4341, updated at b87f3c0)
+
+- T3MP3ST (847 stars, AGPL-3.0): verify-claims pattern validates receipt-first approach. Learn-only.
+- pxpipe (2383 stars, MIT): token compression for pipeline context. Lossy on bytes. Advisory.
+- GRC_Claw (2 stars, MIT): Agent Policy Firewall + attestation ledger. Advisory.