feat: MAINT-002 - Update evidence READMEs for all completed stories

.scratch/distributed-gguf-runtime/evidence/DGR-017/README.md

@@ -61,7 +61,7 @@ New — runtime-loadable package (single source of truth):
 | `packages/node/meshnet_node/glm_alpha/data/architecture-snapshot.json` | Pinned architecture + config/template hashes |
 | `packages/node/meshnet_node/glm_alpha/data/alpha-contract.json` | Sealed acceptance thresholds (`aab23220…`) |
 | `scripts/refresh_glm_target_manifest.py` | Re-resolve/verify pins from upstream metadata (`--check` / `--write`) |
-| `tests/test_glm_alpha_target.py` | 97 deterministic offline tests |
+| `tests/test_glm_alpha_target.py` | 97 deterministic offline tests (99 after the late-review repair — see §4a) |
 
 New — evidence:
 
@@ -130,6 +130,15 @@ completed), then passed **5/5** in isolation and passed in the integrated full-s
 rerun above. This story touches no tracker code; the failed run is retained in
 `commands.txt` rather than hidden.
 
+### 4a. Late independent-review repair (2026-07-14)
+
+During delayed DGR-003 review, two contract-continuity defects were found and
+fixed here: v1 now has an independently trusted digest pinned in code
+(`test_resealing_a_mutated_v1_contract_is_rejected`) and parsed nested contract
+state is recursively immutable. This added two tests; the suite is now
+**99 passed** (`commands.txt` §7 records the exact runs). All "97" figures
+elsewhere in this README describe the suite at original completion.
+
 Planner output (`resource-plan.json`):
 
 | Route | Fits | Headroom |