docs(rust): live validation of export/download/extract paths

version-rust/README.md

@@ -100,21 +100,18 @@ Notes:
 - Negative `--retries`/`--limit` values are rejected by clap (python accepted
   them with odd semantics).
 
-## Untested live paths (validated offline only, per the failure-policy rules)
+## Live validation (2026-10-09/10, channel 1455993943471820842)
 
-- Actual Discord channel export via the DCE container (needs a token) — the
-  docker invocation and export.json parsing are unit-tested, the network path
-  is not.
-- Live gofile downloads (guest account creation, `ensure_token`) — website
-  token derivation is golden-tested against python; the HTTP calls are not.
-- Live 0807 downloads — the `curl -A "Mozilla/5.0" -e "https://0807.st/"`
-  contract is kept, timeouts are per python (`--max-time 1800`), but no live
-  fetch was made.
-- Real `.rar` extraction — the extractor wiring is in place (`unrar` crate,
-  unrar runtime library present), but no real RAR archive was available for a
-  live test.
-- `gwshop` was smoke-tested for request shaping only; a full Algolia browse
-  needs valid credentials (`algolia.json` or env).
+Tested against a real channel with `--since 5d`: DCE export via docker
+(token env-only), URL extraction (449 base64 + 8 plain -> 441 unique),
+gofile (guest account, file-level skip-existing, retry on network errors),
+0807 via curl (zip/7z/rar/torrent), sha256 hashing, manifest attribution,
+state.json resume, RAR extraction through `unrar` (1.4G archive -> STLs),
+nested extraction, and the catalogue CLI on the run dir. 31/31 URLs ok,
+129 files, 82 GiB.
+
+Still not live-tested: a full Algolia `gwshop` browse (needs credentials at
+runtime) and `sorter --apply` against the production library.
 
 ## Build/test on NFS