docs(cv): record durable processing evidence

docs/work-programmes/master-work-plan.md

@@ -16,7 +16,7 @@ Allowed statuses are `NOT STARTED`, `IN PROGRESS`, `IMPLEMENTED — NOT VERIFIED
 
 `DONE` requires every applicable acceptance criterion, focused and regression tests, browser/accessibility/theme/mobile checks, tenant and entitlement checks, documentation, migration/rollback evidence, and production verification. Repository-only work that still requires production is at most `VERIFIED LOCALLY`.
 
-Exactly one implementation item may be `IN PROGRESS`. As of this revision it is **AI-004**.
+Exactly one implementation item may be `IN PROGRESS`. As of this revision it is **UX-001**.
 
 ## Consolidated dependency order
 
@@ -541,11 +541,11 @@ Ordering differences from the suggested list:
 - **Required tests:** safe synthetic PDFs/DOCX/images, proxy/backend/parser/provider failure, duplicate/refresh/restart, E2E.
 - **Required browser verification:** synthetic CV first; authorized private file via temporary local copy only, never logged/committed/external.
 - **Required production verification:** synthetic/local-only canary, no external payload, restart recovery.
-- **Status:** `IN PROGRESS`.
+- **Status:** `IMPLEMENTED — NOT VERIFIED`.
 - **Blocker:** SEC-006 dependency upgrades need internet permission; browser/private-file/MariaDB/production reproduction remains unavailable. Synthetic repository work can continue.
-- **Evidence:** initial V-104 trace: upload still performs extraction/normalization/model work synchronously; reprocess/rebuild/improve return 202 into an unbounded in-memory channel backed by persistent `CvExtractionRun` rows and startup scanning, but do not use AI-001 operation admission/status/notification/provenance/cancellation.
-- **Commit:** none.
-- **Remaining work:** define one `cv.process` operation referencing the extraction-run ID; make upload artifact/run creation return 202; replace channel wakeups with the typed handler; preserve pending-review acceptance; align cancellation/failure/provenance/deduplication; add safe synthetic parser/provider/restart/UI tests. Do not duplicate raw CV data into `UserOperations` or inflate timeouts.
+- **Evidence:** `docs/verification/ai-004-cv-processing-queue.md`; V-104–V-107; real SQLite synthetic integration proves 202/active deduplication/owner-scoped handler/retry provenance/notification/review gate; backend 594/594; frontend 161/161 and build.
+- **Commit:** `c3c5af8` (`feat(cv)!: queue durable processing`).
+- **Remaining work:** SEC-006/007 parser dependency/isolation and complete parser cancellation; browser synthetic upload/refresh/retry/cancel/review at required widths/themes/keyboard; selected-model and worker-restart canary; MariaDB/production rollout. Reconcile dormant extraction-row status immediately when an operation is cancelled before claim. Do not use the private CV before safeguards.
 
 ### UX-001 — Unified authentication page
 
@@ -559,9 +559,9 @@ Ordering differences from the suggested list:
 - **Required tests:** invalid credentials/provider failure/cancel/return, focus/order/labels.
 - **Required browser verification:** 375/768/1440, light/dark, keyboard/focus, logged-out/provider mocks.
 - **Required production verification:** real provider smoke only with authorized accounts.
-- **Status:** `NOT STARTED`.
-- **Blocker:** security dependencies; provider production checks external.
-- **Evidence:** source requirement.
+- **Status:** `IN PROGRESS`.
+- **Blocker:** browser localhost policy and real-provider/production checks; component/source work can continue safely.
+- **Evidence:** source requirement re-read; initial trace confirms `LoginPage` still renders separate local/Google/Microsoft tabs and provider-card components.
 - **Commit:** none.
 - **Remaining work:** keep visual change separate from identity migration.