[Xuepoo]

Priority: P1 | Area: security, runtime | Labels: docs,P1,area:security | Milestone: v0.1.0 | RFC: OQ-014 | Task: CTX-1391

Closes #170

Summary

Syncs runtime/isolation-resource-rfc.md with the landed RC-1 completion-point enforcement (bitty#2314, merged as bitty PR #2348 at 884dafa; supersedes the closed, unmerged bitty PR #2324 cited in the issue body).

• RC-1 row: the "enforcement point unchanged (slice boundary)" clause becomes a pointer to the new completion-enforcement note.
• New note: 5250 ms effective ceiling (50 ms wall + 200 ms store-commit credit + 5000 ms spawn-wait credit); completion enforcement applies to every callback; resumable app-dispatched commands park at the per-tick wall budget and resume on later cold ticks; slice-only callbacks cannot resume and fail closed at the ceiling; exhausting either credit cap alone does not suspend; host time past a cap is charged; existing effects are not rolled back.
• R-RC1-HOST-CALL-CREDIT mitigation 2 and the residual-risk paragraph are rewritten; the old "completion-point gap / advisory ceiling" claim is removed.

The remaining table rows differ only by Prettier column re-padding after the RC-1 cell grew.

Verification

just check (prettier, markdownlint 105 files / 0 issues, links, metadata, language, agents, hygiene, svg, actionlint) passes; just secrets scanned 318 commits with no leaks; act -n dry-ran Docs quality and Secret scan successfully; git diff --check clean.