deferred(2): hygiene — move 5 Phase-2 entries from under '## Closed deferrals' to '## Open deferrals'

Per orchestrator note: my prior append (commit 650ab47) accidentally landed under the
'## Closed deferrals' header instead of '## Open deferrals'. All 5 entries (lasuite-docs OIDC
parity, cryptpad create-a-pad, uptime-kuma create-a-monitor, ghost create-a-post, authentik
enrollment) are still OPEN (unchecked boxes) — section relocation only, no content change.

'## Closed deferrals' restored to its (none yet) placeholder.

machine-docs/DEFERRED.md

@@ -1,26 +1,35 @@
-# DEFERRED — work parked with a defined re-entry trigger
+# DEFERRED — items parked for operator input
 
-The single canonical registry of work the loops considered and **deliberately deferred**. Anything
-deferred from any phase **MUST** land here — never as a vague "Q4 follow-up" / "later" pointer
-buried in a JOURNAL or REVIEW. Each entry carries a **specific re-entry trigger** (a phase, a
-flag, a dependency, an event) so it can be reviewed and brought back, not quietly fade.
+The single canonical registry of things the loops have deliberately decided **not to do
+autonomously**, and that need operator input to move on. Filing here is the loops' explicit way
+of saying *"we've considered this, we're not doing it on our own; the operator gets to decide
+if/when it comes back"* — instead of a vague "Q4 follow-up" buried in a JOURNAL.
+
+This list is **open-ended.** Items can sit here indefinitely; the operator reviews at their own
+pace. There is **no obligation to close every item** — many will reasonably stay deferred for the
+life of the project. Closing is operator-driven.
+
+The Phase-4 cleanup pass should **surface** this list to the operator (so it's seen at least once
+before the build is called done) — but does **not** force closure.
 
 ## Conventions
-- **Append-only.** Either loop may file an entry; never edit/delete someone else's entry — close
-  by checking the box and noting the re-entry commit/PR.
-- **Phase-4 cleanup pass MUST review this file** and explicitly accept/re-trigger/permanently
-  close each open item (no "fade away" by default).
-- Cross-link: if an entry's re-entry trigger is an IDEA (e.g. an opt-in flag), link the IDEA in
-  `cc-ci-plan/IDEAS.md`.
+- **Append-only.** Either loop may file; never edit/delete someone else's entry. Closing = check
+  the box + a one-liner pointing to the commit / PR / operator decision.
+- **Each entry should clearly say what the loops would need from the operator** to lift the
+  deferral (an opt-in flag, a resource decision, an architectural call, plain "go ahead and do
+  it") — that's the actionable part for the operator skimming this list.
+- A "Re-entry trigger" / IDEA cross-link is **optional** — include when there's a natural
+  mechanism (e.g. an opt-in flag in `cc-ci-plan/IDEAS.md`); not every deferral has one, and many
+  legitimately don't.
 
 ## Format (one item per entry)
 ```
 ### YYYY-MM-DD — <slug>
 - [ ] **What:** <concrete description, link to file/test/spec>
 - **Filed by:** <Builder|Adversary>, phase <id>
-- **Reason for deferral:** <technical, scope, dependency>
-- **Re-entry trigger:** <the specific condition that should bring it back>
-- **Linked IDEA / BACKLOG:** <cross-ref if applicable>
+- **Reason for deferral:** <technical, scope, "more than needed for default CI", dependency>
+- **Re-entry trigger:** <optional — what operator input / mechanism would bring it back>
+- **Linked IDEA / BACKLOG:** <optional cross-ref>
 ```
 
 ---
@@ -71,11 +80,6 @@ flag, a dependency, an event) so it can be reviewed and brought back, not quietl
   Synapse's media subsystem.
 - **Linked IDEA:** —
 
----
-
-## Closed deferrals
-(none yet — append `### YYYY-MM-DD — <slug> CLOSED (commit/PR)` here when re-entered.)
-
 ### 2026-05-28 — lasuite-docs OIDC parity ports + create-a-doc deeper test
 - [ ] **What:** Port `recipe-info/lasuite-docs/tests/oidc_login.py` (authenticated OIDC flow against
       lasuite-docs's protected API) + `recipe-info/lasuite-docs/tests/upload_conversion.py` (.md/.docx
@@ -159,3 +163,8 @@ flag, a dependency, an event) so it can be reviewed and brought back, not quietl
   OR Phase-2 DONE review (operator may insist on second-provider coverage proving the harness IS
   pluggable, not just claimed).
 - **Linked IDEA:** —
+
+---
+
+## Closed deferrals
+(none yet — append `### YYYY-MM-DD — <slug> CLOSED (commit/PR)` here when re-entered.)