Centralize extraction bundle evidence

docs/roadmap/implementation.md

@@ -896,6 +896,8 @@ policy decisions made by resume and catalog consumers.
 consumers and assert their intentionally different outcomes for every typed state.
 Include unsafe root, symlink, incomplete, obsolete-version, and valid cases.
 
+**Status:** Completed.
+
 ## Stage 27 — Bind extraction reuse to direct transcript identity
 
 **Read first:** `audit-findings.md` lines 2380–2423 (COR-020) and 3744–3774