Complete facade inspection and secrets bootstrap

docs/roadmap/implementation.md

@@ -423,7 +423,7 @@ candidate inspection and secrets-bootstrap surface.
 
 ## Stage 7 — Complete candidate inspection and bootstrap surface
 
-Status: not started.
+Status: complete (2026-09-12).
 
 1. Add the public explanation/value records and Result Explain, WriteEffective,
    and WriteExplanation delegation. Inspection uses the frozen engine state,
@@ -444,6 +444,24 @@ integration evidence for inspection, credentials, bootstrap, and writer failures
 Run `go test ./internal/facade ./internal/engine`, race tests for both packages,
 and the everyday check. Root remains unchanged until Stage 8.
 
+### Completion
+
+Completed the candidate's inspection and bootstrap API with root-owned
+explanation, snapshot, secret-reference, and bootstrap records. Result delegates
+to the private frozen engine inspection for explanation and rendering, so public
+configuration mutation cannot affect historical or effective output. Bootstrap
+delegates to the engine while returning facade-owned report and error types with
+detached converted entries and diagnostics.
+
+The candidate's exported declarations and methods now match the root surface
+after normalizing its temporary import path. External integration tests cover
+frozen inspection, secret-safe explanation/rendering, malformed and nil result
+handling, bootstrap application/skips, detached report entries, and typed
+bootstrap failures. Linux validation with Go 1.26.7 passed
+`go test ./internal/facade ./internal/engine`, `go test -race ./internal/facade ./internal/engine`,
+and `./scripts/check.sh`. There were no deviations or remaining risks. The next
+handoff moves the verified candidate to the root and removes migration copies.
+
 ## Stage 8 — Cut over the root and remove migration duplication
 
 Status: not started.