Resolve candidate file destinations

docs/internal/overview.md

@@ -64,7 +64,9 @@ in `internal/candidate`. Its validation bridge calls `internal/validation` for
 the default offline Go suite, then runs product-specific checks once. The
 candidate package owns post-validation builds and local-state rechecks;
 publication owns endpoint guards, tag creation, push, and recovery around that
-same candidate validation path.
+same candidate validation path. `internal/validation.CandidateTree` reads
+committed blobs lazily and resolves local destinations from committed entries;
+it does not consult neighboring files or traverse submodule checkouts.
 
 ## Capability owners and behavioral evidence