Deliver module releases to full-tag pages

docs/roadmap/implementation.md

@@ -459,6 +459,17 @@ separate pages. Cover nested managed builds and reject an API prebuilt result
 for another module before hosted requests. Reuse established tampering, conflict,
 partial/unknown, historical-tag, and cleanup tests. Run delivery/Gitea tests.
 
+**Completed:** Delivery now captures checkout identity once, derives the
+selected module's committed tag and note path, compares an optional expected
+full tag, and returns module evidence through local and hosted failures. Managed
+and prebuilt binary results bind to the same repository, module, version, tag,
+commit, settings, and source verification; the CLI carries that identity through
+its existing private receipt. Gitea uses the literal full tag and escapes
+slashes in hosted routes. Verified two module pages at one commit, nested notes
+and slash tags, mismatched expected tags and prebuilt identities, preserved
+delivery recovery cases, `go test ./...`, `go run ./internal/apicheck`, and
+`git diff --check`.
+
 ## Stage 9: Replace receipts with the module-bound schema
 
 **Outcome:** CLI prebuilt delivery uses one current receipt format and one