Demonstrate source-aware path normalization

docs/roadmap/implementation.md

@@ -218,7 +218,7 @@ remaining Stage 3 risks were identified.
 
 ## Stage 4 — Demonstrate source-aware normalization and safe inspection
 
-Status: not started. Dependencies: Stage 3.
+Status: complete (2026-09-12). Dependencies: Stage 3.
 
 Scope: maintained Notarius-shaped example code/fixtures, executable examples,
 explanation/secret integration tests, and consumer guidance.
@@ -260,6 +260,20 @@ workflows. Filesystem policy stays in the example application, not the root libr
 Validation: `go test ./examples/consumers`,
 `go test . -run 'Resolution|Explain|Secret|Example'`, then the everyday checker.
 
+Completion record (2026-09-12): added the maintained `NotariusPathConfig` example
+and fixtures. Its application-owned resolver uses `InputInfo`/`Source` only: file
+values use their exact declaring file, defaults use `source-1`, CLI values use the
+explicit invocation directory, and absolute values remain unchanged. Missing CLI
+bases or missing/composite file provenance retain the relative value and report an
+application warning. Tests prove imported-file, default, CLI, absolute, and canonical
+symlink-target bases without changing process CWD; the symlink test explicitly skips
+when the platform cannot create it. They also prove effective/explanation agreement,
+retained original declaration and reason, sensitive redaction, and that provenance
+queries do not re-read a reader source or resolve credentials before normal lookup.
+The consumer guide links to the executable artifact. `go test ./examples/consumers`,
+`go test . -run 'Resolution|Explain|Secret|Example'`, and `./scripts/check.sh` passed
+with Go 1.26.7 on Linux. No deviations or remaining Stage 4 risks were identified.
+
 ## Stage 5 — Audit the complete contract and hand off release readiness
 
 Status: not started. Dependencies: Stage 4.