docs: fold Craig's cj comments into the network module spec

Set the notification format (title "Networking", label then string), add VPN kill-switch detection and correction off the deferred-vpn branch, and make the no-terminal rule absolute for the module UX. Filed a VERIFY for the one tension: the dead-GUI console-recovery path versus no terminals.

1 files changed, 10 insertions, 0 deletions

diff --git a/todo.org b/todo.org
index 1669a5f..8a2893c 100644
--- a/todo.org
+++ b/todo.org
@@ -226,6 +226,16 @@ V2 sudo-helper. Bonus: wpa_supplicant debug catches wrong-password/EAP failures
 state-120 snapshot misses, so it also closes the auth live-detection gap. Spec: Observability →
 "Automatic diagnostic verbose-capture". Origin: Craig 2026-06-30.
 
+*** VERIFY Dead-GUI console recovery vs "no terminals" — keep =make online= or replace it? :network:
+The cj comment (2026-07-01) said scrub every terminal the module uses to report to or get input
+from the user, and I folded that into decision 15 (all module UX is in-panel). The one place it
+collides: the deliberate console-recovery path — =make online= / =net doctor --fix= run from a
+bare TTY when waybar and the GUI are *down* — is the whole point of the CLI being usable with no
+GUI. That's a terminal reporting to the user, but only because there's no panel to use. Keep it
+as an explicit carve-out (recovery-only, not terminal-as-UI), or replace it with something else
+(a TTY text UI still counts as a terminal)? Your call settles whether the Makefile/CLI recovery
+targets stay in the spec.
+
 ** TODO [#B] Waybar network module — custom/net :feature:waybar:network:
 :PROPERTIES:
 :LAST_REVIEWED: 2026-06-29