Use focused candidate fixtures for release wrapper tests

docs/roadmap/remediation.md

@@ -2,7 +2,7 @@
 
 Date: 2026-10-06.
 Reviewed source: `55333b0`.
-Status: R1 resolved; R2 requires remediation.
+Status: Complete. R1 and R2 are resolved.
 
 ## Scope and assessment
 
@@ -76,7 +76,7 @@ fix. Go-environment, candidate-validation, and build regression checks pass.
 
 ## R2 — Medium: Wrapper regression testing repeats the project suite inside itself
 
-Status: Open.
+Status: Resolved.
 Category: Test maintainability and development cost.
 Introduced by: `3e9b5c1`.
 
@@ -114,10 +114,33 @@ intended object with separate fetch and push repositories. The outer default
 suite supplies the project's broader behavioral evidence once. Use test scope
 and command observations for verification rather than a wall-clock gate.
 
+**Resolution (2026-10-07):** Wrapper fixtures capture the current nonignored
+source, including tracked and untracked worktree changes, through one inventory.
+They exclude the project's test files and add one small candidate test with an
+external validation log. The manually maintained overlay and recursion skip
+flag are removed. The real source-bootstrap wrapper preserves statuses 0, 1,
+2, and 3; the validation log confirms one suite execution for each valid
+candidate and none for invalid input. Captured-endpoint recovery and URL-rewrite
+guards still pass with separate fetch and push repositories.
+
+The focused wrapper regression passes in 7.964 seconds on this host. The final
+uncached offline suite passes, with the CLI package taking 22.842 seconds.
+These measurements record the observed reduction in duplicated work and add
+no duration requirement.
+
+## Completion verification
+
+Both fixes are implemented with focused regression evidence. The complete
+offline suite and compiled API/dependency checker pass with Go 1.26.8 on
+Linux/amd64 using the commands below. Documentation link and whitespace checks
+pass. Each remediation unit is committed separately with a plain English
+message. Production changes are confined to Go configuration discovery; the
+wrapper change preserves the existing publication and recovery contracts.
+
 ## Validation and remaining scope
 
-The following checks passed on the reviewed source with Go 1.26.8 on
-Linux/amd64:
+The following checks passed on the reviewed source and after remediation with
+Go 1.26.8 on Linux/amd64:
 
 ```sh
 GOWORK=off GOPROXY=off GONOPROXY=none GOSUMDB=off GOTOOLCHAIN=local \