fix(navigation): survive stale discovery service

skills/codex/enter-fifth-domain/references/route-contract.md

@@ -9,6 +9,11 @@
 
 Always prefer the `primary.url` and `primary.clone_url` returned by the resolver. Treat any legacy backup as a fallback pointer only.
 
+If the resolver has not yet learned `REPO-012`, use the locked public
+`guanghu-ice-heart` URL only after its live `.code-map` validates the required route
+ids. Mark the result `VERIFIED_PUBLIC_REPOSITORY_FALLBACK`; never fall back to
+`REPO-001` as the current entry.
+
 ## Route identifiers
 
 Resolve these from the live `.code-map` before following them: