Coordinate separate full vet pass

docs/consumers/check.md

@@ -9,7 +9,7 @@ result, err := releasekit.Check(ctx, releasekit.ReleaseRequest{
 	Product:       "Example",
 	Version:       "v1.2.3",
 	Validation: releasekit.ValidationSpec{
-		Go: releasekit.GoValidationSpec{Race: true},
+		Go: releasekit.GoValidationSpec{Race: true, FullVet: true},
 	},
 	AdditionalChecks: func(ctx context.Context, candidate releasekit.Candidate) error {
 		return runProjectChecks(ctx, candidate.RepositoryDir)
@@ -28,11 +28,14 @@ product name and exact version as complete title elements. No local tag with
 that version may already exist.
 
 ReleaseKit runs one `go test -mod=readonly -count=1 ./...` suite with the
-available compatible local Go toolchain, then calls `AdditionalChecks` once
-when supplied. Set `Validation.Go.Race` to run that suite with `-race`; the zero
-value keeps the ordinary native suite. ReleaseKit does not download a different
-toolchain automatically. If the race prerequisite is unavailable, the `go-test`
-check fails rather than being skipped. The suite uses the Go host target,
+available compatible local Go toolchain. Set `Validation.Go.Race` to run that
+suite with `-race`; set `Validation.Go.FullVet` to run
+`go vet -mod=readonly ./...` after successful tests, with test-time vet disabled
+for the suite. It calls `AdditionalChecks` once after shared validation when
+supplied. Their zero values retain the ordinary native test behavior. ReleaseKit
+does not download a different toolchain automatically. If race prerequisites
+are unavailable, the `go-test` check fails rather than being skipped; a selected
+full-vet failure is reported as `go-vet`. The suite uses the Go host target,
 disables workspace and module network access, and ignores ambient `GOFLAGS`,
 experiment, and CPU feature overrides. Effective cache and native cgo/C-tool
 settings are preserved, including values from Go's persistent environment