docs: define TEPP product completion and technical gap baseline

CHANGELOG.md

@@ -6,6 +6,16 @@ All notable changes to TEPP are documented here. The format follows Keep a Chang
 
 ### Added
 
+- Live `docs/product-technical-gap-baseline.md` mapping operator-visible gaps to
+  protected-main maturity, exact current PR/issue state, stacked delivery order,
+  and closure evidence; placeholder-only issues #161 and #162 were closed as
+  queue hygiene. The documentation validator requires a dated UTC snapshot, a
+  40-character protected-main SHA, an exact-head inventory matching the declared
+  open-PR count, and operator-gap closure evidence, and it rejects affirmative
+  queued-Checks-as-implemented-main claims even when wrapped across a line
+  break, and it rejects an unrelated `not` in the same span (`queued Checks are
+  not required; this PR is implemented-main`). Only never/do not/does not/
+  cannot/must not plus promote/treat/make/mean counts as a promotion denial.
 - `tepp_api` naruon live loopback HTTP/1.1 listener: `serve_one` installs a read/write deadline, requires a loopback `Host`, refuses `Transfer-Encoding` and NIM/proxy credential headers, parses `knowledge_cutoff` as RFC 3339 and refuses a future cutoff, keys analysis-run idempotency by tenant plus key, and proves both analysis-run and export POSTs over a real `TcpStream`. Not a production TLS/`$PORT` service (ADR 0011).
 - `tepp_api` adaptive orchestration router (ADR 0010): versioned `direct`/`verify`/`committee`/`conductor`/`abstain` selection from CPU `f64` risk, ambiguity, evidence, and token-budget inputs; recorded stages, recursion, decomposition, access lists, and role-specific reasoning effort; fail-closed document-controlled policy/access/credentials; LLM plans remain proposals under deterministic statistical authority; comparable-budget ablation requires a direct baseline; credential-free contextual-orchestrator binding. Live NIM HTTP remains accepted-target.
 - `tepp_api` purpose-bound provider-payload minimization: time-bounded `PurposeGrant` evaluation, fail-closed expired/not-yet-valid/inverted/cross-tenant/impossible-calendar denial, semantic UTC calendar validation, refusal to copy identity mappings into model-provider payloads or ordinary logs, preservation of opaque analytical identifiers and membership roles (no blanket PII mask), a separately authorized scientific re-identification path, and an internally bound FIPS 180-4 SHA-256 audit digest appended through `ReidentificationAuditSink` before disclosure.
@@ -75,6 +85,14 @@ All notable changes to TEPP are documented here. The format follows Keep a Chang
 
 ### Changed
 
+- Refreshed the live gap-baseline inventory to the 2026-08-24T05:41:54Z GitHub
+  snapshot (118 open PRs / 48 drafts / 12 issues; protected-main
+  `c45be17a9dbce95ef81cee230e9d128abc7160ac`), binding each operator-gap current
+  head SHA to that exact-head register, including #201 `6afd650667e1` (RFC 5646
+  cited once; first GAP-005 slice, not implemented-main), stacked drafts
+  #202–#204, and #164 `ff2e645b1785` as the predecessor register head. Duplicate
+  PR #179 remains closed. Stacked-merged heads and queued Checks are not
+  implemented-main.
 - Clarified ADR 0001 so it owns Rust-first numerical/reference-backend authority while ADR 0011 owns cross-service MSA/service authority.
 - Clarified ADR 0006 so it owns GPU/VRAM and model-credential boundaries; ADR 0010 now owns LLM orchestration policy and ADR 0015 owns autonomous repository-write/review/merge authority.
 - Expanded ADR 0002–0005 and 0009–0011 with explicit implementation maturity, alternatives, failure/recovery, compatibility/migration, verification, and rollback/supersession boundaries where they were previously implicit.

DOCUMENTATION.md

@@ -5,6 +5,7 @@ TEPP's approved PRD v0.4 and implementation plan are the primary product baselin
 | Area | Canonical document |
 |---|---|
 | Approved product requirements | [`docs/product/prd-v0.4-approved.md`](docs/product/prd-v0.4-approved.md) |
+| Live product and technical gap baseline | [`docs/product-technical-gap-baseline.md`](docs/product-technical-gap-baseline.md) |
 | Whole-conversation documentation fitness | [`docs/DOCUMENTATION_ASSESSMENT.md`](docs/DOCUMENTATION_ASSESSMENT.md) |
 | Technical requirements | [`docs/TRD.md`](docs/TRD.md) |
 | Architecture | [`ARCHITECTURE.md`](ARCHITECTURE.md) |

docs/adr/0011-standalone-modular-msa-boundary.md

@@ -1,7 +1,7 @@
 # ADR 0011 — Standalone operation and modular CWL MSA boundary
 
 **Decision status:** Accepted  
-**Implementation maturity:** partial — Rust crates are independently usable; naruon HTTP interchange and loopback live listener (`POST /v1/analysis-runs` and `/v1/exports`, fail-closed table-access, NIM/proxy headers, RFC 3339 cutoff, stream deadline) are on the active PR (not implemented-main); production TLS/`$PORT` and remaining persistence integrations remain accepted-target  
+**Implementation maturity:** partial — Rust crates are independently usable; naruon HTTP interchange and loopback live listener (`POST /v1/analysis-runs` and `/v1/exports`, fail-closed table-access, NIM/proxy headers, RFC 3339 cutoff, stream deadline) are on the active PR (not implemented-main); production TLS/`$PORT` and remaining persistence integrations remain accepted-target
 **Date:** 2026-08-10  
 **Supersedes:** The broad cross-service ownership wording in ADR 0001. ADR 0001 remains authoritative for Rust-first numerical architecture.
 

docs/connectors/naruon-artifact-consumer.md

@@ -1,6 +1,6 @@
 # naruon modular consumer contract for TEPP artifacts
 
-**Status:** Partial — versioned DTO, HTTP interchange, and loopback live listener on the active PR; production TLS/`$PORT` remaining  
+**Status:** Partial — versioned DTO, HTTP interchange, and loopback live listener on the active PR; production TLS/`$PORT` remaining
 **Last reviewed:** 2026-08-16
 
 ## Boundary