feat: complete catalog-driven preprocessing

docs/contracts/workspace-evidence-v3.md

@@ -5,6 +5,10 @@ workspace descriptor. Evidence is optional: a valid v4 descriptor without it rem
 When present, `evidence` is strict: it contains `source` and a defaulted strict `policy`; every
 source variant and the policy reject unknown keys.
 
+The version numbers are intentionally separate: the Evidence descriptor supports v1/v2, while the
+latest Curated Evidence Unit format is v3. There is no Evidence descriptor v3/v4 and no Curated
+Evidence Unit v4.
+
 ```mermaid
 flowchart LR
     REGISTRY["Workspace registry"] --> DESCRIPTOR["Evidence descriptor"]
@@ -228,13 +232,15 @@ authoring repository.
 P1.1 performs no acquisition, extraction, preprocessing/indexing, embeddings, Qdrant writes,
 active-snapshot retention, or GC.
 
-## Operator validation
+## Runtime publication
 
-After the runtime configuration is rendered or acquired, validate it with the exact per-command
-option ordering:
+After the curator has published a valid revision, the installation operator publishes it only as
+part of complete workspace preprocessing:
 
 ```sh
-tht config check -c <path>
+tht --installation <absolute>/thothii-installation.yaml \
+  workspace preprocess run --workspace <workspace-id>
 ```
 
-Stop after validation. P2/P6 later owns preprocessing and materialization.
+This command also consumes the PostgreSQL Catalog snapshot and rebuilds schema/LSH output. There is
+no public Evidence-only preprocessing command.