chore: finalize integrated release baseline

.project-docs/50-evidence/evidence-index.md

@@ -20,9 +20,12 @@ Use this index for searchable, traceable evidence records.
 | 2026-09-02 | Leadership-dashboard filtering and summary interaction | Repository and focused regression verified; merged runtime not restarted | [Integration record](../30-worklog/tasks/20260902-integrate-all-push-c93a7f21.md) | Single-connection bounded reads, SQL prefiltering, selective hydration, 20-row paging, cancellation/timeout feedback, and display-only metric cards with explicit filters passed combined regression. |
 | 2026-09-02 | Native ERP product search for ordering forms | Root cause and live search-only behavior verified; repository/release verified; extension not reloaded | [Integration task](../30-worklog/tasks/20260902-integrate-product-search-3b7f6a20.md) | Both `plan_add.asp` and `orders_adds.asp` returned exactly one target product for the full keyword with radios left unchecked and no save; extension `0.5.165` now uses native non-empty search before its bounded empty-query fallback while retaining deterministic unique matching. |
 | 2026-09-03 | Account-scoped ERP queues, assignee-only executable routing, and force delete | Repository and full regression verified; runtime not deployed or mutated | [Integration task](../30-worklog/tasks/20260903-finalize-account-routing-7c4e2a91.md) | Source task `20260902-per-account-queue-hard-delete-a6d9f2c1` replaced global head-of-line blocking with per-assignee FIFO/advisory locks, isolated SSE/plugin-result/browser-command routing from administrator read visibility, and separated reversible archive from lifecycle-independent physical deletion. |
-| 2026-09-03 | Adaptive ERP readiness and central extension host updates | Mixed disposition: plugin/release retained; server architecture reverted before production rollout | [Original integration task](../30-worklog/tasks/20260903-finalize-extension-update-a6c4e192.md) | Exact extension `0.5.167` source/package and adaptive readiness remain active. Migration 019 and central private-OSS/ECS orchestration are recoverable only at exact commit `b2e33e2` on remote branch `codex/backup-extension-update-20260903-b2e33e2`. |
-| 2026-09-03 | Extension-update iteration scoped rollback | Backup ref verified; `0.5.167` retained; server/migration rollback and regression rechecked | [Rollback task](../30-worklog/tasks/20260903-backup-revert-extension-update-c71a4e92.md) | The full stack was backed up before normal non-force commits removed server-side automatic updating and migration 019; active main keeps extension `0.5.167` and migration 018 without rewriting Git history. |
+| 2026-09-03 | Adaptive ERP readiness and central extension host updates | Mixed disposition: plugin/release retained at rollback; server architecture reverted before production rollout | [Original integration task](../30-worklog/tasks/20260903-finalize-extension-update-a6c4e192.md) | Exact extension `0.5.167` and adaptive readiness were retained when migration 019 and central private-OSS/ECS orchestration moved to backup commit `b2e33e2`; the active plugin later advanced independently. |
+| 2026-09-03 | Extension-update iteration scoped rollback | Backup ref verified; server/migration rollback and regression rechecked | [Rollback task](../30-worklog/tasks/20260903-backup-revert-extension-update-c71a4e92.md) | The full stack was backed up before normal non-force commits removed server-side automatic updating and migration 019; the rollback retained extension `0.5.167` and migration 018 without rewriting Git history. |
 | 2026-09-07 | Team-lead task-summary projection and proactive AgentBus delivery | Repository and disposable-PostgreSQL verified; not deployed or externally sent | [Feature task](../30-worklog/tasks/20260907-implement-leader-agentbus-copy-b7e31a94.md) | Migration 020, future-only encrypted projection, privacy allowlist, stale-uncertainty supersession, employee-first outbound priority, stable proactive frame IDs, no `reply_to`, echo rejection, and administrator controls passed full regression; exact AgentBus/WeChat routing still needs an authorized canary. |
+| 2026-09-07 | Exact ERP account identity and extension `0.5.169` | Repository, focused identity, package/source, and release hashes verified; not loaded or deployed | [Integration task](../30-worklog/tasks/20260907-integrate-all-changes-9d2e7c41.md) | One unique `#Lable_UserName` node plus normalized full equality is now the only accepted identity proof; missing, duplicate, blank, substring-only, and unrelated page-text matches fail closed without exposing the observed account. Uncertain writes direct manual read-only verification to the immutable task owner. |
+| 2026-09-07 | Required-field-only passenger roster normalization `v1.4.0` | Synthetic/parser, Skill-package, release, and 12-page DOCX rendering verified; exact uploaded file unavailable for replay | [Integration task](../30-worklog/tasks/20260907-integrate-all-changes-9d2e7c41.md) | The 12 required source semantics alone drive extraction and validation; ordinary non-import columns are ignored and excluded from canonical TSV, while workbook-wide active-content checks remain. |
+| 2026-09-07 | Assignee-based leader dashboard and administrator task-plane isolation | Repository and disposable-PostgreSQL verified; runtime rollout not performed | [Integration task](../30-worklog/tasks/20260907-integrate-all-changes-9d2e7c41.md) | Team leads see assigned manual and AgentBus work through the bounded read model; migration 021 removes and rejects administrator task principals, while UI/HTTP/service guards deny administrator task access. |
 
 ## When To Add Evidence