docs: Wave 1 wiring recorded + honest fingerprint limitation (nav entries -> Chrome audit)

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QJs13VsyiSKYQP6rj3NNmc

specs/STATE.md

@@ -769,6 +769,40 @@
 > ONLY on DESIGN · `/parlay` is drawer-reachable, not unreachable · `/compare` is already honest.
 > **No live surface is showing fabricated data today.**
 
+> ## 🔌 WAVE 1 WIRED 2026-07-31 → `specs/wave1-wiring.md` — three surfaces proven, then linked
+> No grade/ledger/model/scoring change (diff empty across `intelligence/`, `ledgerService`,
+> `outcomeService`, `gradeSlateService`).
+> **REVIEW ZERO PROVED EACH BEFORE WIRING.** **0.1 `/intelligence` vs `/system` are NOT duplicates** —
+> `System.dc.html` is a MULTI-surface artboard (TERMINAL + INTELLIGENCE + WIRE sections), not a design
+> for a distinct `/system` route; its INTELLIGENCE section is **already realised** as the live
+> `/intelligence` page, so **no `/system` should be built as a second copy — the prod 404 is correct**.
+> **0.2 `/intelligence` gates SERVER-side, not by blur** — the proxy requires auth and limits by tier
+> (**desk 50 / non-desk 8**), returning **401 to anonymous, verified live** → wiring it leaks nothing.
+> **0.3 `/slip` parses a REAL slip end to end** — DraftKings fixture → **3/3 legs, `needs_review:
+> false`**, `Aaron Judge · total_bases · over 1.5 @ -115`. **Honest limit: parsers are layout-rigid; an
+> unsupported layout yields ZERO legs, never wrong ones** (never-guess) — so real-world OCR hit-rate
+> across layouts is **CANNOT DETERMINE** until user slips arrive. **0.4 `/parlay` direct route hits the
+> real correlation builder** on the same `ParlayContext` as the drawer. **0.5 `/marketplace` made NO
+> performance/profit claim** (the worse category — clean) and its capture was **already real**
+> (`/api/waitlist` → upsert to a `waitlist` table); the gap was TENSE, not fabrication.
+> **WIRED:** Nav MORE gains **Intelligence · Slip Reader · Marketplace**; **Parlay Lab re-pointed from
+> the `#parlay` drawer hash to `/parlay`** (drawer unaffected — `ParlayPanel` stays mounted with its
+> floating badge). **GATING:** `/intelligence` added to `GATED_ROUTES` (its feed 401s signed-out, so an
+> ungated link would land visitors on a permanently empty page). **`/parlay` stays OPEN deliberately** —
+> it is the free parlay funnel; gating it would be a monetization regression.
+> **`/marketplace` HONESTY PASS:** every item body now opens **"Not built yet." / "Not written yet." /
+> "Not produced yet."** + what is planned; the subhead states plainly it is **"not a purchase, not a
+> pre-order, and not a promise of a ship date"**; the playbook item carries **"No profit claim, no
+> promised return."** Capture stays REAL — no fake button. Unit-locked (every body must carry a
+> not-yet marker; no guaranteed/win-rate/ROI/beat-the-book language).
+> **FLOOR: 315 suites / 3,920 tests green (12 new), web build exit 0.** **FINGERPRINT:** deploy
+> CONFIRMED (new marketplace copy live; all four routes 200; intelligence feed still 401s anon).
+> **⚠️ The nav ENTRIES could NOT be verified by curl and are not claimed** — a control test shows the
+> PRE-EXISTING `"Parlay Lab"`/`"The Report"` labels are **equally absent** from the 18 sampled chunks
+> (the dropdown is client-rendered from a lazily-fetched chunk), so this is a probe limitation, not a
+> failure → **added to the Chrome manifest** (confirm the dropdown shows the four entries, and that a
+> signed-out Intelligence click lands on `/login`).
+
 - **Redirect EXISTS + WIRED:** `closingCapture.buildCaptureRows`→`closing_captures` (append-only,
   provenance: captured_at/book/line_type/both-prices/missed_reason) via `intradayRefreshService:221`
   + internal endpoint; `ledgerService.attachClosingProb`→`closing_prob` (de-vigs both raw sides,