docs: align public preview status and README

[Nobodyworld]

Summary

Aligns public-facing documentation with the merged execution and exact-SHA evidence foundation, while replacing stale permanent validation claims with durable links to authoritative evidence.

Exact branch state

base/main: dcb8e283f8445dd76f215a98023197d8ed5acab3
head: c2c403e88227a94f14096c07084bca5a35eb0e6b
branch: docs/public-preview-status-final
commits: 1
changed files: 4 documentation files

This replacement PR supersedes closed PR #123. It was created because #123’s post-merge synchronization commit used a non-allowed merge Conventional Commits type. The correction does not weaken Commitlint or force-rewrite public history; it recreates the already reviewed documentation content as one clean conventional commit directly on current main.

Changes

README.md

• describes the merged trusted outbound local worker and compact exact-SHA evidence workflow;
• removes hard-coded test-count and coverage claims;
• adds compact evidence to the product explanation and reviewer path;
• links the current worker, API, status, and release documentation.

SECURITY_NOTES.md

• classifies dated findings as historical snapshots;
• removes the obsolete current-tense strict-Mypy warning;
• preserves the Linux symlink gate as an active release requirement;
• points to current policy, audit, issue, PR, and workflow records.

docs/TASKLIST.md

• records feat(evidence): add exact-SHA validation evidence #120 as merged at its exact squash SHA;
• preserves the remaining Linux/Docker release gate;
• records feat(github): request exact-PR validation and publish compact evidence #122 and feat(evidence): reuse exact validation evidence with local availability proof #121 as the now-unblocked Phase 2 sequence.

docs/reports/status.md

• records the merged validate-switchboard@1 evidence baseline;
• links operator setup and evidence-retention guidance;
• preserves PUBLIC DEVELOPER PREVIEW — NOT PRODUCTION READY;
• distinguishes merged product capability from formal release authorization;
• identifies feat(github): request exact-PR validation and publish compact evidence #122 followed by feat(evidence): reuse exact validation evidence with local availability proof #121 as the next bounded slices.

Scope

Documentation only. No runtime, dependency, workflow, repository-setting, release, or security-control behavior changes.

Validation gate

Keep this PR draft and unmerged until its own Commitlint and complete CI matrix pass, including lint/pre-commit, TODO validation, Mypy, full pytest, security, full-history Gitleaks, links, coverage thresholds, and strict browser UI tests.

[Nobodyworld]

Closing this PR without merge because connector-authored Git-data commits did not generate the repository's required pull-request workflow events, even after branch reconciliation and ready/draft cycles.

The documentation content is preserved unchanged on a final replacement branch created entirely through normal contents-API commits, which previously produced reliable Actions events:

base: dcb8e283f8445dd76f215a98023197d8ed5acab3
replacement branch: docs/public-preview-status-actions
replacement head: fa9667dd04d95b5e7c899d4e16ce22d1790c7ae8
changed files: README.md, SECURITY_NOTES.md, docs/TASKLIST.md, docs/reports/status.md

No policy was weakened, no force-push occurred, and no runtime or workflow file changed. This PR remains historical coordination evidence and must not be merged.