Verify ConfigKit integration and record release handoff

docs/roadmap/implementation.md

@@ -3,10 +3,9 @@
 ## Status, Authority, And Historical Plans
 
 Planned on 2026-09-26 against Scriptorium commit
-`43eea5c7c41d2a8134b3dece60f3af5c98b8fd1c`. No stage is implemented by this
-planning change. Execute Stage 1 through Stage 7 in order. Each stage is sized
-as one focused gpt-5.6-terra implementation task, including tests and current
-documentation. The maintainer has resolved the inspection-policy question:
+`43eea5c7c41d2a8134b3dece60f3af5c98b8fd1c`. This document records the
+ordered implementation and its completion evidence. The maintainer resolved
+the inspection-policy question:
 `extra_params` remain visible; only API-key values require secret protection.
 
 The [feature roadmap](configkit.md) owns scope, target behavior, and user intent.
@@ -429,7 +428,12 @@ visible, and explanation neither resolves nor discloses API-key values.
 
 ## Stage 7: Verify Integration, Finish Documentation, And Record Release Handoff
 
-**Status: Not started.**
+**Status: Complete.** The feature roadmap, command paths, dependency boundary,
+documentation, and attribution were audited. Maintained single-file and
+composed examples passed configuration inspection and no-provider rendering;
+the optional-credential/integer-parameter backend path passed with a local
+provider. The full test, race, vet, build, formatting, link, and diff checks
+passed. Release preparation is recorded below; no tag or publication occurred.
 
 1. Review the feature roadmap against actual code. Confirm all five original
    command modes and all four new configuration subcommands use one definition
@@ -488,6 +492,37 @@ is not guaranteed reloadable. Include dependency/attribution changes and the
 existing LICENSE | ATTRIBUTION footer. Preserve the still-relevant Promptkit
 v0.11 release handoff identified above when preparing a combined next release.
 
+### Implementation And Release Preparation Record
+
+The ConfigKit v0.4.0 adoption is implemented in committed source. The next
+breaking release still needs version selection, version-matched release notes,
+candidate validation, tagging, and publication under the release policy; none
+has occurred as part of this work. Keep the earlier Promptkit v0.11 handoff
+linked above when preparing a combined release.
+
+The release note should summarize the deliberate configuration migration:
+empty files now fail and `{}` means an empty mapping; explicitly empty strings
+and zero values override lower values; `null` follows declared nullable types;
+strict YAML rejects additional documents, anchors/aliases, unsupported scalar
+forms, and unknown fields; `configkit` is reserved and ConfigKit's source and
+resource limits apply. Explicit `--config ''` is invalid. Imports are opt-in
+per file directive, while `--config-overlay` selects one named overlay under
+the selected file's canonical directory; application path *values* remain
+process-working-directory-relative. Only explicitly supplied application CLI
+flags override configuration. An explicit empty server address is passed to
+the standard HTTP server and does not restore Scriptorium's default.
+
+Document the four application-inspection modes and the selected policy:
+`extra_params`, including history, and `api_key_env` reference names remain
+visible, but actual API-key bytes are never resolved by ConfigKit. Inspection
+output can be sensitive and is not guaranteed reloadable. Application
+validation neither probes a provider nor completely validates Promptkit
+definitions. Keep request retry overrides and Promptkit's credential rules
+separate from application settings. Include the new dependency and attribution
+notices, and retain the existing LICENSE | ATTRIBUTION footer. Deferred
+secrets bootstrap, schema versioning, reload, and remote acquisition remain
+deferred; do not imply source or binary publication has happened.
+
 ## Open Questions
 
 None remain for this scope. On 2026-09-26 the maintainer selected no redaction