Inspect committed workspace files

docs/roadmap/implementation.md

@@ -337,6 +337,12 @@ behavior, API/profile parity, and failure before later product/build work.
 
 ## Stage 6: Select committed workspace-file inspection
 
+**Completion:** Complete. `Validation.ModuleDistribution.WorkspaceFiles` and
+`validation.module_distribution.workspace_files` report committed blob entries
+named `go.work` or `go.work.sum`, including nested paths and symlinks. The rule
+inspects the captured candidate independently of `GOWORK` and leaves the Go
+workspace environment and vendor behavior unchanged.
+
 **Outcome:** One distribution rule works independently of the Go environment.
 
 1. Add `ModuleDistributionValidationSpec.WorkspaceFiles` and the matching JSON