feat(blender): extension set live in the GUI; MCP acceptance 9/9, probe made safe-mode compliant

persistent-memory.md

@@ -201,10 +201,10 @@ _As of 2026-09-27 ~0900 PT._
   add-ons (`stacks/blender/extensions.lock`) built by `scripts/blender-extensions sync` into
   `fv-ml1:/tank/blender-extensions/5.2/system` (LIVE), mounted read-only as the System repo;
   `fleet_extensions.py` enables them (GUI startup timer; `blender-run --extensions`). Headless
-  acceptance 8/9 (CAD Sketcher sketching is GUI-only). **⚠ The stack deploy that wires the GUI
-  and the hook (`deploy-stack.sh fv-ml1 blender`) was DENIED by the permission classifier on
-  2026-09-28 and awaits Prime**; until it runs, `blender-run --extensions` fails cleanly (mount
-  error) and the MCP acceptance is not done. SurfacePsycho's eval() is patched to literal_eval.
+  acceptance 8/9 (CAD Sketcher sketching is GUI-only); **MCP 9/9 after Prime ran the deploy himself
+  (1505; the classifier had refused mine)**. SurfacePsycho's eval() is patched to literal_eval
+  (held under MCP). Open: agent-drawn CAD Sketcher geometry (its stateful ops want point picks),
+  and MeasureIt overlays not seen in MCP screenshots. GUI left DOWN.
 
 ### Zigbee2MQTT on esh-docker-vm (2026-09-27, Prime go-ahead; ha-dev request)