Phase 7e: damocles migration plan; CLAUDE.md phase status

CLAUDE.md

@@ -156,7 +156,18 @@ in.
     listing containers (deep-linked to their per-container UI) + pending
     approvals. Same aesthetic.
   - Firewall opens 7000, 8000, 8100–8999 when the module is enabled.
-- 🔜 Phase 7 — dashboard approval-actions + live message-flow + xterm.js terminal
+- ✅ Phase 7 — polish:
+  - 7a — dashboard `POST /approve/<id>` / `/deny/<id>` buttons + unified
+    diff (via `similar`) of applied vs proposed `agent.nix`.
+  - 7b — broker broadcast channel + `/messages/stream` SSE + live message-flow
+    panel (cyan `→` sent / green `✓` delivered, 200 row cap).
+  - 7c — `ApprovalResolved` helper events into the manager's inbox
+    (`SYSTEM_SENDER` + `HelperEvent` JSON). Manager harness recognises and
+    logs them distinctly.
+  - 7d — default `MemoryMax=2G` + `CPUQuota=50%` applied to every managed
+    container via `/run/systemd/system/container@<NAME>.service.d/hyperhive-limits.conf`
+    drop-in (regenerated on every spawn / rebuild).
+  - 7e — damocles migration plan (`docs/damocles-migration.md`).
 
 ## Approval flow (Phase 5)