Remove legacy manifest provenance decoding

docs/roadmap/audita.md

@@ -93,8 +93,11 @@ newly written selection provenance use overlay terminology as well.
 
 Maintain existing value-based digest and stage-reuse semantics; renaming
 informational selection provenance is not a reason to invalidate completed
-work or rewrite historical manifests. Update maintained examples and operator
-migration guidance for the directory and flag changes.
+work or automatically rewrite historical manifests. Strict manifest decoding
+rejects retired provenance fields; operators must deliberately migrate that
+informational member on a backed-up manifest, preserving execution/checkpoint
+state. Update maintained examples and operator migration guidance for the
+directory, flag, and provenance changes.
 
 This rename does not apply to downstream model profiles, Scriptorium
 `profile_id`, Audita's proposal/validation profiles, or Notarius's

docs/roadmap/implementation.md

@@ -46,9 +46,11 @@ as base selection; do not add a persistent default selector or new precedence.
 
 Rename newly written informational provenance to overlay terminology, including
 `selected_overlay` in manifest configuration provenance. Do not add a dual-field
-reader, rewrite historical manifests, or introduce a manifest-version rejection
-solely for this informational rename. Existing generic decoding behavior applies
-to old optional provenance; it does not become resume authority. Preserve
+reader, automatically rewrite historical manifests, or introduce a manifest-version
+rejection solely for this informational rename. Existing strict typed decoding
+rejects retired provenance fields. Document backed-up operator migration of
+that informational member without changing execution/checkpoint state; it does
+not become resume authority. Preserve
 semantic fingerprints and effective-value digest rules when values are unchanged.
 
 Only Narratio pipeline configuration selection is renamed. Keep model/profile
@@ -199,8 +201,9 @@ config commands in `internal/app/`; configuration provenance in
    directory is not a discovery fallback. Do not freeze incidental error wording.
 5. Verify unchanged effective values retain digest and stage-reuse behavior;
    only diagnostic source labels/paths and selected provenance terminology change.
-   Test loading representative existing manifests without inventing a new
-   invalidation or rejection gate for old optional selection metadata.
+   Test current provenance round trips and strict rejection of unknown/retired
+   provenance fields. Document deliberate operator migration; do not add a
+   compatibility decoder, semantic invalidation rule, or schema-version gate.
 6. Run focused and full tests before proceeding so failures from the dependency
    and terminology change are separated from adapter migrations. No Audita or
    Notarius credential/CLI behavior changes in this stage.

docs/roadmap/remediation.md

@@ -1,6 +1,6 @@
 # Audita v2 and ConfigKit Migration Review Remediation
 
-Status: Pending.
+Status: Complete.
 
 Reviewed `83eaa96` through `fae18bf` against the approved clean-cutover decisions,
 [feature roadmap](audita.md), and [implementation plan](implementation.md).
@@ -46,7 +46,14 @@ Required remediation:
 
 ## 2. Remove the unapproved manifest compatibility decoder
 
-Priority: P2. Status: Pending.
+Priority: P2. Status: Complete.
+
+Removed the permissive custom decoder; ordinary strict typed decoding now
+applies to provenance as well. Replaced historical-acceptance coverage with
+retired/unknown-field rejection tests, all of which failed before removal.
+Current provenance round-trip coverage remains intact. Corrected the roadmap,
+plan, internal contract, and operator guidance for narrow backed-up migration
+without discarding execution/checkpoint state or changing resume authority.
 
 Location: `internal/manifest/manifest.go:79-89`,
 `internal/manifest/store_test.go:78`, and `docs/internal/manifest.md`'s decoding
@@ -92,6 +99,8 @@ reader. Do not treat that exception as already granted.
 
 ## Review verification
 
+The following records the original review, before remediation.
+
 - Existing `go test ./...` passed.
 - Race tests passed for subprocess, Audita, Notarius, config, stage, app, and
   manifest packages after removing the temporary reproduction.
@@ -105,6 +114,13 @@ shared named credential forwarding/redaction, a v2-only Audita subprocess
 adapter, ordinary reports as diagnostics, and versioned ordered-module polish
 evidence. No live model/provider runs were performed during this review.
 
+## Migration remediation verification
+
+Completed on 2026-09-25. Both new regressions failed before their respective
+fixes. After remediation, `go test ./...`, `go test -race ./...`,
+`go vet ./...`, `go build ./...`, documentation checks, maintained configuration
+example checks, and `git diff --check` passed. No live provider runs were needed.
+
 ## Historical completed transcription review
 
 Status: Complete.