docs: publish PDF remediation and Phase 9 qualification evidence

docs/redesign/phase-9/p9-remed-02/security/REMEDIATION.md

@@ -48,3 +48,5 @@ Filelock4 changes some shared-cache/on-disk lock protocols; the inspected Huggin
 Torch/Transformers records include many alternative model, conversion, Trainer, optimizer and compiler operations with no matching application call found. Those absences are explicitly source-limited. Fixed-repository `from_pretrained` loading still exists without an immutable revision/artifact integrity record; actual checkpoint format and model dependency internals remain unqualified. The standard user cache contained no DistilBART snapshot, and no model download/inference was attempted. Some provider records describe other library versions/model families; the inventory retains those ranges and does not assert a reproduced exploit in this application.
 
 Next security action: select and validate a compatible patched Torch/Transformers CPU graph for the existing model, verify immutable model/tokenizer/checkpoint identities, startup and representative inference/extraction contracts in an approved local environment. Alternatively, the product/security owner must explicitly decide any serious residual risk after applicability evidence. This task does not accept it for them. Container isolation, resource limits and mocked inference tests do not close that gate. Bootstrap pip/wheel, base OS/OCR libraries and actual production identities remain separate release audit obligations.
+
+Final exact-pin refresh at2026-10-24T23:16:26Z (25October local):49pins/98queries,99records/3packages, same advisory identities and metadata, no added/removed IDs. The known vendor PyPI404 is retained;97 requests succeeded. See [final-refresh.json](final-refresh.json). Current model-disabled full regression again passes58 cases; no real model qualification is implied.

docs/redesign/phase-9/p9-remed-02/security/final-refresh.json

@@ -0,0 +1,24 @@
+{
+  "lockSha256": "23f200fef330e2677ff4a47e5fcbaa327f98c3d4ebdcf73e2047e9f61664e7cb",
+  "sameLock": true,
+  "queryCount": 98,
+  "packageCount": 49,
+  "advisoryRecords": 99,
+  "findingPackages": 3,
+  "coverageErrors": [
+    {
+      "package": "torch",
+      "version": "2.6.0+cpu",
+      "provider": "pypi",
+      "httpStatus": 404,
+      "error": "HTTPError"
+    }
+  ],
+  "observedUtc": "2026-10-24T23:16:26.272101+00:00",
+  "sameAdvisoryIdentities": true,
+  "addedIds": [],
+  "removedIds": [],
+  "metadataChanges": [],
+  "rawSummarySha256": "0d02e084704112a8a3be9d6630181363e24e0c6010a226315efb71a2a20009cc",
+  "scope": "Public exact locked-pin queries, no installation, inference, exploit or owner risk acceptance. Prior per-advisory dispositions retained only where identities/ranges remain applicable."
+}