docs: align public preview status and README

[Nobodyworld]

Summary

Aligns public-facing documentation with the merged execution foundation and replaces stale permanent validation claims with durable links to authoritative evidence.

Intended documentation changes

• README.md — describes the merged trusted outbound local worker and compact exact-SHA evidence workflow without hard-coded test or coverage claims.
• SECURITY_NOTES.md — classifies dated findings as historical and removes the obsolete current-tense Mypy warning.
• docs/TASKLIST.md — records completed execution phases, the remaining Linux release gate, and the now-unblocked Phase 2 queue.
• docs/reports/status.md — records the merged feat(evidence): add exact-SHA validation evidence #120 baseline, preserves the public developer-preview classification, and points to current release and roadmap records.

No runtime, dependency, workflow, repository-setting, or release behavior is changed.

Synchronized branch state

PR #120 was owner-authorized and squash-merged to main at dcb8e283f8445dd76f215a98023197d8ed5acab3.

The documentation branch was synchronized through a true two-parent merge commit created without force-pushing or rewriting history:

base/main: dcb8e283f8445dd76f215a98023197d8ed5acab3
previous documentation head: 874a4b32de764d79417adb10904e4c891e860d9a
synchronization merge: 5af7a7f68f0d1a75db7d9bb2c8263c2b24bfc0c4
ahead of main: 5 commits
behind main: 0
merge base: dcb8e283f8445dd76f215a98023197d8ed5acab3
changed files: 4 documentation files

The merge tree uses the complete #120 main tree and overlays only the four reviewed documentation files. The resulting PR contains all merged product changes and no runtime diff relative to current main.

Validation

The pre-synchronization documentation head passed Commitlint 29964892123 and complete CI 29964892138.

The synchronization commit must receive its own successful Commitlint and complete CI matrix before this PR is marked ready. Required jobs include lint/pre-commit, TODO validation, Mypy, full pytest, security, full-history Gitleaks, links, coverage thresholds, and strict browser UI tests.

Keep PR #123 draft and unmerged until the post-#120 head is fully green.

[Nobodyworld]

Connector review complete. This is a one-file documentation correction from current main, does not overlap PR #120, removes stale numeric and Mypy claims, preserves the developer-preview/non-production boundary, and points readers to the authoritative release and roadmap issues. Commitlint and the complete hosted CI matrix passed. No local Codex execution is needed. Keep unmerged until explicit owner authorization.

[Nobodyworld]

Additional public-document follow-up identified during connector review:

• SECURITY_NOTES.md is a chronological evidence log, but its 2026-06-27 Remaining section still states that strict Mypy is red.
• That statement is historical; current protected CI runs strict Mypy successfully.
• The Linux symlink item remains current and belongs to issue release: execute Linux symlink and final local validation #104.

Do not push another documentation-only commit while this branch is based on the worker-only main, because every push reruns the known nondeterministic cancellation race fixed by PR #120. After #120 merges and this branch is recreated/updated from the resulting main, include a minimal clarification in SECURITY_NOTES.md that preserves the dated historical evidence while pointing current status to PUBLIC_RELEASE_AUDIT.md, #95, and #104.

Intended post-#120 documentation scope is therefore:

• durable docs/reports/status.md;
• reconciled active docs/TASKLIST.md;
• historical/current-status clarification in SECURITY_NOTES.md;
• complete final-head hosted matrix after rebasing/recreating from merged main.

[Nobodyworld]

Connector review completed for the final four-file documentation head.

• Scope is limited to README.md, SECURITY_NOTES.md, docs/TASKLIST.md, and docs/reports/status.md.
• The branch is four commits ahead and zero behind its exact base.
• No runtime, dependency, workflow, release, repository-setting, or PR #120 files are changed.
• No unresolved review threads exist.
• Commitlint 29964892123 and CI 29964892138 passed the complete matrix, including lint, Mypy, tests, security, Gitleaks, links, coverage, and strict browser tests.

The documentation corrections are review-clean. Keep this PR draft and unmerged solely because PR #120 must merge first; then recreate or update the branch from the resulting main SHA and rerun the complete matrix before marking ready.

[Nobodyworld]

Closing this superseded documentation PR without merge.

Post-#120 synchronization required a two-parent merge commit. Its subject, merge(main): synchronize public preview documentation, is not an allowed Conventional Commits type, so Commitlint correctly failed. The documentation content and complete CI work were otherwise valid, but weakening Commitlint or force-rewriting this public branch would be the wrong correction.

Replacement disposition:

current main: dcb8e283f8445dd76f215a98023197d8ed5acab3
replacement branch: docs/public-preview-status-final
replacement commit: c2c403e88227a94f14096c07084bca5a35eb0e6b
changed files: README.md, SECURITY_NOTES.md, docs/TASKLIST.md, docs/reports/status.md

The replacement is one clean conventional documentation commit based directly on current main. No runtime, workflow, dependency, or release behavior was copied or changed. This PR remains available as historical coordination evidence but must not be merged.