docs: add definitive truth block to quarantine — single source of truth

This block replaces the 5 competing memory claims with verified facts:
- 19 containers (not 25)
- /deploy is POST-only with auth (not 'doesnt exist')
- auto_patch_proven=false (proof hashes in other repo)
- Port corrections: hermes-voice 18901, openhands 3010, forgejo 3020
- 7 not-running containers documented

docs/receipts/stale-memory-quarantine-20260702.json

@@ -74,5 +74,35 @@
     "explicit approval + fresh valid ZTE/factory gate receipt"
   ],
   "decision": "quarantined",
-  "deployAttempted": false
+  "deployAttempted": false,
+  "definitiveTruth": {
+    "containers": 19,
+    "phase": 4,
+    "agents": 6,
+    "infra": 14,
+    "monitoring": 5,
+    "skills": 63,
+    "deployAuth": "8099 POST /deploy with Authorization header forwarding to 8098 deploy-webhook",
+    "autoPatchProven": false,
+    "autoPatchReason": "Proof hashes (55bdf3f, fd3053b, 02fc745) are in pi-real-engineering repo, NOT in fable-agent. auto_patch_proven=false in committed code.",
+    "ollamaType": "Bare metal systemd (not Docker). Was 127.0.0.1 loopback, now fixed to 0.0.0.0:11434.",
+    "portCorrections": {
+      "hermes-voice": "18901 (not 18790)",
+      "openhands": "3010 (not 3003)",
+      "forgejo": "3020 (not 3030)"
+    },
+    "notRunningContainers": [
+      "scanner",
+      "prometheus",
+      "grafana",
+      "node-exporter",
+      "agent-sandbox",
+      "scanner_postgres",
+      "mock-llm"
+    ],
+    "testStatus": "295 passing, 69 files",
+    "receiptCount": 27,
+    "quarantineClaims": 9,
+    "lastCommit": "6b182d1"
+  }
 }