feat(onboarding): migrate source-backed setup guidance

docs/redesign/phase-7/p7-01/evidence/account-results.json

@@ -136,6 +136,11 @@
     "staticExportSnapshot": {
       "root": ".artifacts/phase7/p7-01/account-final/export",
       "qualification": "Exact raw files copied from job-tracker-ui/out; original path/digest algorithm and source observations remain unchanged"
+    },
+    "historicalSourceApplicability": {
+      "appliesAtCommit": "ad7b4196af638f3a8c79e261ffd96507bd002835",
+      "mapping": "identity.accountSourceSnapshots maps each originalSourcePath to exact immutable raw bytes and its canonicalLfSha256",
+      "qualification": "accountSourceFiles and accountSourceSha256Lf are historical measured source identities. Later legitimate changes, including P7-02 translations, must be verified against these immutable snapshots or the committed ad7b419 tree rather than the current workspace. Original hashes/digest remain unchanged."
     }
   },
   "environment": {
@@ -34071,7 +34076,37 @@
   "serverErrorLocalisation": "Existing server-authored English errors in NB states are explicitly retained; caller fallback is translated. No new hard-coded product strings or invented server translation.",
   "productionAndDeferred": "Main27657f31131cd95d42f0e1290853ec9c9b3959a4 unchanged; production NO-GO, M01-M12 open, M13/P5-13 deferred do-not-execute, Phase8 outside scope",
   "pushReceipt": {
-    "status": "PENDING_PARENT_ACCOUNT_COMMIT_AND_PUSH"
+    "status": "NORMAL_PUSH_VERIFIED",
+    "checkedUtc": "2026-10-11T19:16:15.819630+00:00",
+    "head": "ad7b4196af638f3a8c79e261ffd96507bd002835",
+    "originDevelopment": "ad7b4196af638f3a8c79e261ffd96507bd002835",
+    "live": {
+      "refs/heads/codex/ui-redesign-phase4": "ad7b4196af638f3a8c79e261ffd96507bd002835",
+      "refs/heads/main": "27657f31131cd95d42f0e1290853ec9c9b3959a4"
+    },
+    "main": "27657f31131cd95d42f0e1290853ec9c9b3959a4",
+    "originMain": "27657f31131cd95d42f0e1290853ec9c9b3959a4",
+    "worktree": "",
+    "raw": {
+      "path": ".artifacts/phase7/p7-01/account-final/push-receipt.json",
+      "sha256": "e27e026ae49478355af8f7ade07f825db3710ebf56907cf6f83263efcb7dcb96",
+      "hashPolicy": "Exact measured raw bytes"
+    },
+    "staticGate": {
+      "path": "docs/redesign/phase-7/p7-01/evidence/static-checks.json",
+      "sha256": "a872440b8907f9303034ef652da7dbd03018ce9fc28584bea5d32f82354199f7",
+      "hashPolicy": "Portable JSON UTF-8 text with CRLF normalized to LF",
+      "checkedUtc": "2026-10-11T19:15:39.214576+00:00",
+      "status": "PASS",
+      "commands": 4,
+      "documentation": {
+        "files": 8,
+        "relativeLinks": 303,
+        "errors": []
+      },
+      "qualification": "Final staged checkpoint hygiene, distinct from successor receipt updates"
+    },
+    "qualification": "Actual successor receipt; original tested working-tree identity/build/runtime/public slice remains unchanged. Clean worktree recorded at immediate observation, not inferred for future work."
   },
   "rawRetention": {
     "root": ".artifacts/phase7/p7-01/account-final",