Add Phase 9 validation and advisory review

Record the finite dependency search, Wi-Fi maintenance blocker, and
pinned
icon provenance. Add bounded host orchestration and fixture coverage,
and
update release documentation with current evidence.

docs/release_packaging.md

@@ -40,8 +40,10 @@ traversal, binary notice payloads and exhausted bounds fail closed. Symlinks in
 input-root or output-parent ancestry are rejected too: pass real non-symlinked
 paths, not a convenience symlink. All input preflight completes before creating
 output. The limits are 128 inputs, 4 MiB per input/catalog and 32 MiB cumulative
-source bytes. The current catalog has 62 inputs (about 2.1 MB read and 0.51 MB
-copied before the generated manifest/introduction).
+source bytes. The current catalog has **75 inputs**, including the retained SVGs and pinned
+[icon provenance evidence](icon_provenance.md). Overview documents edited in this
+integration are not catalog inputs; `docs/icon_provenance.md` **is pinned**.
+Coordinate any change to that record with the catalog owner; never silently repin.
 
 An existing output file, directory (even empty) or dangling symlink is never
 overwritten. Parent directories are not automatically created. Output uses
@@ -58,7 +60,8 @@ checks prevent symlink traversal but are not isolation from the same OS user.
 - `README.txt`: limitations and entry point for recipients.
 - `inputs/project/…`: project GPL text, resolved lock, managed licenses and
   manifests, wolfSSL/wolfSSH README evidence, original wolfSSH header excerpts,
-  xterm MIT texts and recorded provenance, icon summary, TLSF full rendering
+  xterm MIT texts and recorded provenance, icon summary and official 7.4.47
+  SVG/license/metadata evidence, TLSF full rendering
   and scope/provenance statement.
 - `inputs/sdk/…`: complete scoped SDK license documents, mixed Newlib/argtable3
   notices, radio license files, package/version identity and original source
@@ -122,15 +125,27 @@ catalog policy and test it. The runtime does not discover added notices or
 packages outside its finite list; this limitation makes its reads bounded and
 prevents opportunistic collection of user files.
 
+## Supplied execution evidence — 2026-09-16
+
+Agent results: **36 notice fixture tests PASS**, and **two actual 75-input
+bundles verified deterministic**, each **77 files / 4,433,930 bytes**. These
+replace the earlier 62-input / 64-file / 541,147-byte snapshot, not its historical
+record. No parent rebuild or bundle reassembly was run in this documentation
+turn; firmware source is unchanged. Assembly is not legal clearance or Phase 9
+acceptance. The [unfixed Wi-Fi blocker](wifi_security_update_plan.md) also remains
+a separate security gate; a future coherent vendor update requires catalog review.
+
 ## Separate work before distribution
 
 1. Resolve or obtain qualified review of radio-blob corresponding-source or
    exception basis for the actual linked firmware. Apache binary permissions
    alone do not settle this question. No legal clearance is claimed.
-2. Resolve the wolfSSH package/header discrepancy and verify exact two-icon
-   provenance/licensing (recorded 7.4.47), including any applicable NOTICE.
-   Supplying the full Apache text is not provenance verification. No icon
-   assets or generated data were changed by this packaging work.
+2. Resolve the wolfSSH package/header discrepancy and remaining icon derivative
+   questions. [Exact retained SVG provenance](icon_provenance.md) is verified at
+   official 7.4.47, commit `9e04201d4557e729822fb57f62a316c3dea1d4a8`: Google
+   USB and Simran Wi-Fi. Full Apache text is retained; no NOTICE was found in
+   that pinned distribution. Manual firmware bitmap derivation and the distinct
+   mockup Wi-Fi path remain unresolved. No artwork was regenerated.
 3. Audit the final application/bootloader/runtime object set and aggregation
    boundaries. Full SDK/toolchain redistribution needs broader nested/tool/test
    notice coverage; this is not an all-files license scanner.