feat: MAINT-002 - Update evidence READMEs for all completed stories

.scratch/distributed-gguf-runtime/evidence/DGR-005/README.md

@@ -7,20 +7,23 @@ real-model integration (TinyLlama 1.1B, opt-in via MESHNET_ENABLE_REAL_INFERENCE
 
 All six acceptance criteria pass:
 
-1. **Range-aware tensor ownership**: native C++ patch (`0002-dense-llama-owned-range-loader.patch`)
+1. **Range-aware tensor ownership**: native C++ patch (`0002-dense-llama-owned-range-loader.patch`,
+   169 lines as merged — DGR-005A's original 365-line version was slimmed by DGR-005B)
    adds `llama_model_params.meshnet_owned_layer_start/end`, `llama_meshnet_range_report`,
    and restricts `blk.N.*` registration to the owned range.
 2. **Head/tail embedding loading**: head loads `token_embd.weight`; tail loads `output_norm`/`output`
    (with tied-embedding dedup). Middle shards load zero endpoint tensors.
 3. **Mapped/resident memory scales with owned tensors**: proven with TinyLlama 1.1B Q4_K_M.
-4. **Targeted pytest tests**: `tests/test_llama_cpp_dependency.py` (47 passed), native CTest
+4. **Targeted pytest tests**: `tests/test_llama_cpp_dependency.py` (3 tests — lock/patch
-   (`test-meshnet-range-ownership` synthetic fixture).
+   manifest consistency, offline dependency report, control-plane-code scan; re-verified
+   2026-07-14: `3 passed, 6 skipped` together with the opt-in integration file), native CTest
+   (`test-meshnet-range-ownership` synthetic fixture, added by the 0002 patch).
 5. **compileall, ruff, git diff --check, full pytest**: all pass.
 6. **Integration test**: `tests/test_gguf_distributed_load.py` (6/6, opt-in real model).
 
 ## Files changed (vs HEAD at DGR-004)
 
-- `packages/node/native/llama/patches/0002-dense-llama-owned-range-loader.patch` — 365-line native patch
+- `packages/node/native/llama/patches/0002-dense-llama-owned-range-loader.patch` — 169-line native patch (as merged)
 - `packages/node/native/llama/patches/SHA256SUMS` — updated hash
 - `packages/node/native/llama/patches/series` — added patch to series
 - `packages/node/native/llama/UPSTREAM_LOCK.json` — updated patched_tree, serial number

.scratch/distributed-gguf-runtime/evidence/DGR-017/README.md

@@ -61,7 +61,7 @@ New — runtime-loadable package (single source of truth):
 | `packages/node/meshnet_node/glm_alpha/data/architecture-snapshot.json` | Pinned architecture + config/template hashes |
 | `packages/node/meshnet_node/glm_alpha/data/alpha-contract.json` | Sealed acceptance thresholds (`aab23220…`) |
 | `scripts/refresh_glm_target_manifest.py` | Re-resolve/verify pins from upstream metadata (`--check` / `--write`) |
-| `tests/test_glm_alpha_target.py` | 97 deterministic offline tests |
+| `tests/test_glm_alpha_target.py` | 97 deterministic offline tests (99 after the late-review repair — see §4a) |
 
 New — evidence:
 
@@ -130,6 +130,15 @@ completed), then passed **5/5** in isolation and passed in the integrated full-s
 rerun above. This story touches no tracker code; the failed run is retained in
 `commands.txt` rather than hidden.
 
+### 4a. Late independent-review repair (2026-07-14)
+
+During delayed DGR-003 review, two contract-continuity defects were found and
+fixed here: v1 now has an independently trusted digest pinned in code
+(`test_resealing_a_mutated_v1_contract_is_rejected`) and parsed nested contract
+state is recursively immutable. This added two tests; the suite is now
+**99 passed** (`commands.txt` §7 records the exact runs). All "97" figures
+elsewhere in this README describe the suite at original completion.
+
 Planner output (`resource-plan.json`):
 
 | Route | Fits | Headroom |