Make debug evidence opt-in and retain all candidates

docs/roadmap/implementation.md

@@ -709,6 +709,17 @@ reported at finalization without erasing a completed transcript.
 
 ## Stage 11 — Make Debug Persistence Explicit and Independent
 
+**Completed 2026-09-24.** Debug directory creation and all current debug writer
+paths are gated by `diagnostics.debug`; failures are reported safely to stderr
+without aborting processing. The retained directory uses the supplied run ID,
+old retention modes are gone, raw and normalized snapshots are redacted, and the
+candidate ledger includes proposals not applied after filtering or interruption.
+Tests cover explicit candidate capture, retained debug evidence, secret redaction,
+and writer behavior. `go test ./internal/core/redaction
+./internal/core/diagnostics ./internal/framework/runner
+./internal/framework/processreport` and `git diff --check` passed. CLI package
+compilation is deferred to Stage 12's replacement of the old report lifecycle.
+
 **Work:** Refactor `core/diagnostics` run-directory creation and all CLI/module/
 proposal/validator writer wiring for H. Only debug creates the unique retained
 run directory. Gate snapshots, interaction files, ledger, and full execution data