Propagate source evidence sensitivity through history

docs/roadmap/implementation.md

@@ -1,6 +1,6 @@
 # Implement shared source version checks
 
-Status: Stages 1–9 complete; historical and dependency sensitivity remains.
+Status: Stages 1–10 complete; public source evidence remains private.
 
 Audience: a Luna coding agent implementing one numbered stage per prompt, in
 order. The [feature roadmap](source-version-checks.md) owns target behavior and
@@ -517,6 +517,25 @@ Validate: source-version/history/inheritance/resolution/sensitivity tests,
 `go test -race ./internal/engine`, and everyday check. Done: established
 sensitivity closure applies without polluting payload history.
 
+Completion evidence: added original mounted evidence paths and ancestors to the
+existing classification path set before schema/predicate evaluation and the
+shared dependency closure. This lets existing recorded dependencies and
+inheritance links carry evidence sensitivity into dependent and displaced
+historical values, including evidence-only paths absent from final metadata;
+Resolution.Record validation and dependency policy are unchanged. Added a
+load-level regression using a valid recorded dependency on the credentials
+container (not a synthetic dependency on the header), plus inherited displaced
+history coverage. Neighboring values remain visible, and consumed headers create
+no metadata, explanation, or Diff paths. These checks passed with Go
+`go1.26.8 linux/amd64`:
+
+- `GOTOOLCHAIN=local GOPROXY=off go test ./internal/engine -run 'SourceVersion|Secret|Sensitivity|History|Inheritance|Resolution' -count=1`
+- `GOTOOLCHAIN=local GOPROXY=off go test -race ./internal/engine`
+- `GOTOOLCHAIN=local ./scripts/check.sh`
+- `git diff --check`
+
+No environmental limitation affected validation; checks ran on Linux/amd64.
+
 ## Stage 11 — Publish detached sanitized source evidence
 
 1. Add private/public SourceVersionCheck and SourceInfo.VersionCheck records.