fix(security): no VM but Artemis and Hera can make Hera run text; a message runs once; word-ACL elevation removed

Any identity could have arbitrary FORTH run as Zuse: KH-ELEVATE-SEND and
KH-BLK-ATTACH-SEND sent any text to Hera, from any VM (shown live).  And the
drain popped a message after running it, so a payload calling a colon word
ran twice.  Both fixed test first (FABRIC-3 SXXXVII):

- KH-BLK-ATTACH-SEND is ( dev-addr ok? -- sent? ), Artemis only; the kernel
  writes the reply text.  BLK-ATTACH-ACK is Hera's only.
- The drain pops before it runs.
- Elevation, ruled not needed: KH-ELEVATE-SEND, message type 8,
  zuse-eligibility.4th, ZUSE-ELIGIBLE?/ZUSE-ELIGIBILITY-ADD/
  ELEVATE-PUBKEY-UNPACK and the eligibility list removed; its disk area
  stays reserved, unused.  FABRIC-3.7 closed.

Three ISAs: POST 1052 passed; new parity baseline word_count=523
hash=0xb73b58052d591638 (deliberate).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs/fabric/FABRIC-3.7.md

@@ -1,6 +1,18 @@
 # FABRIC-3.7.md — Phase 8 PKI: the elevation entrypoint
 
-**Status: OPEN — design only, no code written or authorized.**
+**Status: CLOSED 2026-10-14 — not needed; elevation removed, not built.** Captain Bob, asked
+"is it even a necessary capability?": privilege comes from the drive (Zuse's drive, or the
+personality an identity is minted with), so a runtime request-and-grant channel only adds attack
+surface — and the old one was a live hole: `KH-ELEVATE-SEND` let any identity have arbitrary
+FORTH run as Zuse. `ELEVATE-GRANT` granted automatically on eligibility-list membership (no
+human approves), into Hera's own dictionary (never the requester's), and could never reach a
+FORTH-79-locked identity's words (pinned, and pins are one-way). Removed: `KH-ELEVATE-SEND`,
+message type 8, `zuse-eligibility.4th`, `ZUSE-ELIGIBLE?`/`ZUSE-ELIGIBILITY-ADD`/
+`ELEVATE-PUBKEY-UNPACK`, the eligibility list itself and Part B's gate in `zuse.4th`;
+`devblock_from_top` 1–63 on Artemis's disk stay reserved, unused (his ruling). See
+`FABRIC-3.md` §XXXVII. Everything below is kept as the record of the design.
+
+**Former status: OPEN — design only, no code written or authorized.**
 
 **CORRECTION (2026-09-22, before any code was written against this document): §2's central
 claim — that the old `SEND-ELEVATE-REQUEST` passed a raw cross-VM address into `ELEVATE-GRANT`'s