docs(project): record Pi submit hotfix evidence

.project-docs/30-worklog/tasks/20260825-pi-submit-rejected-hotfix-9f3c7a62.md

@@ -8,7 +8,7 @@
 - Worktree: D:\Datas\OthersProjects\makelore-pi-submit-rejected-hotfix-9f3c7a62
 - Base commit: 4580568384f5391f2030bde57c63ff90891172b3
 - Owner: codex-root
-- Status: Verifying
+- Status: Ready
 
 ## Scope
 
@@ -103,7 +103,16 @@
   distinct definite-POST branch before the retry reaches the real Pi runtime.
   The extension and proxy proof provider modes are protected by a focused
   wiring regression.
-- Packaging and final artifact/product proof remain pending.
+- Implementation commits are `5f0ef761eaab8ac397ce83a5cfdb152579c4e86a`
+  (`fix(pi): recover from Works prompt rejection`) and
+  `e3debc9b3337ff20594997f445500e19c288dc64`
+  (`test(pi): separate submit rejection proof`). This task record is the final
+  documentation-only commit before producing the immutable installer candidate.
+- Changed product/proof files: `electron/coding-runtime/pi/provider-config.ts`,
+  `electron/coding-runtime/pi/release-proof.ts`,
+  `scripts/run-pi-subagent-packaged-smoke.mjs`,
+  `src/stores/coding-conversations.ts`, and four focused unit suites plus the
+  release-proof wiring suite.
 
 ## Verification
 
@@ -124,6 +133,23 @@
   corrected to keep role rejection and definite submission injection separate.
 - After that correction, focused, typecheck, lint, full unit, `build:vite`, and
   Windows Electron E2E were rerun and passed with the same counts/warnings.
+- A formal clean-HEAD `package:win` qualification, Windows artifact/closure
+  verifier, Pi runtime/closure verifier, and packaged Main/UI proof all passed
+  before this documentation commit. The packaged proof established:
+  Works-shaped `developer` rejection and `system` acceptance; zero Provider
+  requests for the injected definite rejection; draft restoration and enabled
+  retry after edit; a settled retry through the actual packaged Pi runtime;
+  parent/child requests using only `system`; current Host-token use without
+  argv/models/log/diagnostic leakage; no permanent submitting/recovering or
+  runtime-unavailable banner; and zero residual Electron/Pi proof processes.
+- Formal packaging and those three artifact/product verifiers are rerun after
+  this record is committed so the reported NSIS fingerprint is bound to the
+  final clean cumulative HEAD. The exact absolute path, size, SHA-256, and final
+  reports are intentionally recorded in the immutable handoff rather than by a
+  post-package source commit that would move HEAD.
+- Real external Provider verification remains explicitly waived and accepted
+  risk (`realTurnVerified=false`). Controlled loopback/fault injection is not a
+  full Provider Pass; macOS and native non-WSL Linux status are unchanged.
 
 ## Follow-ups