docs(validation): record complete WFL candidate pass

Author: logbie

docs/orm-acceptance-audit.md

@@ -1,8 +1,10 @@
 # ORM acceptance audit
 
 This audit tracks the complete requested deliverable. Local candidate evidence
-does not substitute for the final resolved nightly-image CI run. The final PR,
-remote failure-propagation proof and final revision provenance remain pending.
+does not substitute for the final resolved nightly-image CI run. The final
+candidate passed 41/41 complete suites and repository hygiene; see
+`orm-verification.md`. The ready-to-merge PR, remote failure-propagation proof
+and final revision provenance remain pending.
 
 | Requirement | Implementation and executable evidence |
 | --- | --- |
@@ -40,7 +42,7 @@ remote failure-propagation proof and final revision provenance remain pending.
 | Timeout/failure cleanup and failure propagation | Owned child lifecycle, joined bounded output, nonzero exit and descendant markers in WFL tooling suites; final deliberate failing CI commit is still required |
 | Keep Linux/Windows governance and Blacksmith nightly | Updated Governance provisions current nightly assets on both platforms; WFL job freshly resolves/pins Docker digest and records runtime/source revisions |
 | Independent review and repaired findings | `orm-independent-review.md`, `independent-migration-review.md`, `runtime-review.md`, migration safety regressions and HTTP evidence distinguish source review from Maintainer approval; `type-analysis-review.md` records remaining runtime static-analysis diagnostics honestly |
-| Final ready-to-merge five-section PR | Pending final source freeze, complete local pass, hygiene, deliberate CI Red/Green, fresh nightly provenance and exact-head remote inspection |
+| Final ready-to-merge five-section PR | Source frozen, complete local pass and hygiene recorded; pending deliberate CI Red/Green, fresh nightly provenance and exact-head remote inspection |
 
 The upstream runtime fixes require a published nightly before final Scriptorium
 acceptance. The user authorized upstream implementation and separate PRs;

docs/orm-implementation-evidence.md

@@ -63,12 +63,13 @@ capability and provenance evidence remains in `runtime-capabilities.md`.
 The executable progression in `examples/orm/progression.test.wfl` passes three
 cases using explicit migrations from the first saved record through composed
 queries, transactions, relationship loading and reversible index changes.
-The combined candidate is `ae5395d9`, executable SHA256
-`76f612ca1bbaf4484b2cc2bda86d876588bc765de9c38b7daa8951bad143b911`.
+The final combined candidate is `df6ad9a2`, executable SHA256
+`b96c06f6013a9a64d4d042c9b379a30af1c8d274d7855b5ebe9d7fe14a750d1c`.
 All 16 existing database cases, three authentication cases and six rendering
-cases pass. The HTTP reviewer records 11/11 against the integrated application
-in `tests/integration/EVIDENCE.md`; the subsequent review fixes require the final
-complete-suite rerun.
+cases pass. The final complete gate passed 41/41 suites, including the HTTP
+review cases, legacy upgrade, migration recovery and pinned Scribe, on source
+`3bc7b4f`. [The verification record](orm-verification.md) retains the exact local
+provenance and distinguishes the still-pending official nightly acceptance.
 
 ### Retained regression chronology
 

docs/orm-verification.md

@@ -29,10 +29,19 @@ Scribe remains pinned to `93d62af5a6ed6c3ce257ef888107fc3ca1e2dc1d`.
 
 ## Local complete-suite gate
 
-The candidate complete runner passed 40/40 discovered suites before independent
-review added the historical-index regression. The final expanded source gate
-is pending. The earlier 40-suite log is
-`target/full-candidate-df6ad9a2-green.log` (ignored local evidence).
+The final candidate complete runner passed **41/41 discovered suites**, zero
+failures, exit 0, on Scriptorium source
+`3bc7b4faaf9c000047d940f0e420067b777db5c9`. This includes the historical-index
+review regression, strengthened CLI CRLF fixture and nested HTTP probe cleanup.
+The exact command was `target/runtime/combined-df6ad9a2/wfl.exe scripts/run_tests.wfl`.
+The ignored local log is `target/full-candidate-final.log`. The earlier complete
+40-suite result is retained in `target/full-candidate-df6ad9a2-green.log`.
+
+`python scripts/check_repo_hygiene.py` passed with 179 candidate paths; Git
+reported a clean worktree and `git diff --check` passed. The source audit found
+no active Python test implementation or driver. The only non-WFL files under
+tracked tests/scripts are the hygiene checker implementation and the existing
+Scribe update utility.
 
 The hygiene checker fixtures create disposable Git repositories and need child
 Git execution permission. A first sandboxed complete run passed 39/40 suites;