docs: record the stress findings and the 16-gate suite

caveats §13 documents the capacity ceiling the stress test found: the
workqueue backlog grows with the offered rate and OOM-panics a 1 GB guest
above ~1 Gbit/s. Gate count, suite status and the doc indexes move to
16/16 green.

README.md

@@ -8,7 +8,7 @@ the real OpenBSD `pfctl` over the `/dev/pf` ioctl ABI.
 **Status:** the filter core, stateful filtering, tables, anchors, NAT
 (`nat-to`/`rdr-to`/`binat-to`), forced routing (`route-to`/`dup-to`/`reply-to`),
 pools, `divert`, `pflog` and the OpenBSD 8.0 **queues (HFSC)** are **verified
-in a real libvirt lab** — 15/15 gates green. What is still pending is stated
+in a real libvirt lab** — 16/16 gates green. What is still pending is stated
 per feature in [`docs/en/feature-matrix.md`](docs/en/feature-matrix.md).
 
 Screencasts (EN + PT, narrated): [`docs/en/screencast.md`](docs/en/screencast.md).
@@ -25,7 +25,7 @@ Design: [`docs/superpowers/specs/2026-11-11-pf-linux-port-design.md`](docs/super
 | M3 | NAT (`nat-to`/`rdr-to`/`binat-to`), scrub | **done** — gates 05/06/07/09 (incl. 2 MB integrity through a redirect, min-ttl/max-mss measured) |
 | M4 | route-to/dup-to/reply-to, pools, divert e2e, pflog | **done** — divert (11), pflog (12), route-to/dup-to (08), pools (10), reply-to (13) verified |
 | M5 | queues: HFSC back end in the data path | **done (mechanical)** — gate 15: queues load, hfsc attaches, `pfctl -s queue -v` reports class stats, a 2 MB queued flow is counted by the class. `bandwidth` = HFSC linkshare (guarantee, not cap; 8.0 has no upperlimit syntax) |
-| M6 | docs complete, patchset tidy, full suite green, tagged release | **done** — docs EN+PT-BR, 15/15 suite green, tagged (`v1.0.0`) |
+| M6 | docs complete, patchset tidy, full suite green, tagged release | **done** — docs EN+PT-BR, 16/16 suite green, tagged (`v1.0.0`) |
 
 ## What you get
 
@@ -63,7 +63,9 @@ Details, per-phase breakdown and the YouTube description text:
 
 ## Quick start
 
-Full recipe: [`docs/en/install.md`](docs/en/install.md). Short version
+Full recipe: [`docs/en/install.md`](docs/en/install.md). **Debian 13 (trixie)
+from zero** (host prep → kernel → module → tools → lab → stress):
+[`docs/en/debian13.md`](docs/en/debian13.md). Short version
 (commands are read from the scripts):
 
 ```sh
@@ -91,7 +93,9 @@ Documentação em português: [`README.pt-BR.md`](README.pt-BR.md) e
 - `tools/` — pfctl (static Linux build), pdivert relay, pflogd, ABI harness (`make -C tools abi`)
 - `patches/kernel/` — Linux core patch set (currently empty; evidence in `p1-needs.txt`, see `docs/en/patches.md`)
 - `scripts/` — fetch/build/patch/VM automation, plus `scripts/screencast/` for the videos
-- `tests/vm/` — VM suite: 15 gates (`tests/vm/NN-*.sh`) + `lib.sh`
+- `scripts/debian13/` — Debian 13 host preparation (`prepare-host.sh`)
+- `scripts/stress/` — stress runner (`run-stress.sh`) + report writer
+- `tests/vm/` — VM suite: 16 gates (`tests/vm/NN-*.sh`) + `lib.sh`
 - `docs/en/` + `docs/pt-BR/` — full bilingual documentation
 - `docs/superpowers/` — design spec + implementation plan