docs: Phase 0C controlled baseline candidate

[vib-tools]

OpenInvoice Phase 0C — Controlled Baseline Candidate

Purpose

This Draft PR prepares 1.0.0-candidate.1 for Human Architecture Owner review. It reconciles the Phase 0B.3 human approval with repository governance records and consolidates candidate architecture, UX, engineering, security, operations, dependency and traceability documentation.

Source

• Repository: vibtools/OpenInvoice
• Base branch: main
• Prepared from: 4cfc3cb5de400d4459cc5fd691a208abc185018f
• Candidate status: review only
• Production code: not started

Non-authorizations

This PR does not:

• approve the baseline;
• accept any ADR;
• approve dependency versions;
• create a production lockfile;
• authorize baseline-v1.0.0;
• authorize Phase 1;
• authorize production implementation.

Evidence posture

• PR fix(packaging): complete Windows packaging validation (Phase 0B.3) #1/source integration: repository-verified.
• Phase 0B.3 final Windows result: human-attested.
• Independent Windows rerun during Phase 0C: not performed and not claimed.
• Candidate documentation direction: documentation-derived and linked through stable evidence IDs.

Audit patch R1

The audit patch:

• adds EVID-013 for Phase 0C documentation-derived directions;
• replaces classification text in traceability evidence columns with stable evidence IDs;
• limits ADR-0004 traceability to scheduler/timezone/restart semantics;
• records architecture_change_implemented: false;
• hardens the Phase 0C review checklist for PR checks and no-false-green CI claims.

Current review gate

Keep this PR in Draft until:

1. audit patch R1 is applied and revalidated;
2. all six ADR dispositions receive human decisions;
3. dependency directions receive human decisions;
4. baseline 1.0.0-candidate.1 is approved, revised or rejected;
5. tag and Phase 1 authorization are handled through a separate controlled action.

Validation note

At the time of the audit, no combined status checks, GitHub Actions runs, reviews or inline threads were reported for the PR head. Mergeability is not equivalent to approval.