docs(evidence): narrow owner gate baseline

docs/testing/evidence-restructuring-manual.md

@@ -34,14 +34,17 @@ Read-only snapshot collected 2026-08-25:
   `47516f85b4db4a67cfa8a86cea4cb2e7b98c5813`.
 - proposed PSD branch name: `codex/evidence-restructuring-psd` (proposal only; no
   external branch has been created);
-- rollback command for the owner to use only if the later authorized migration must be
-  undone:
+- rollback command for the owner to use only if a later authorized migration must be
+  undone. It restores the PSD worktree to this pre-migration commit and was not run by
+  this task:
 
   ```bash
   git -C /Users/mp/projects/tht-workspace-psd reset --hard 47516f85b4db4a67cfa8a86cea4cb2e7b98c5813
   ```
 
-- exact source inventory (36 files; `evidence/README.md` is not a source):
+- exact migration inventory: **35 moveable source documents** listed below, plus the
+  retained `psd-clinical/evidence/README.md` (36 current evidence files total). The
+  README is not a source document and must remain at `psd-clinical/evidence/README.md`:
 
   ```text
   psd-clinical/evidence/00-glossario/coorti-universi-pazienti.md
@@ -81,9 +84,12 @@ Read-only snapshot collected 2026-08-25:
   psd-clinical/evidence/50-metadati-normalizzazione/normalizzazione-device-cied.md
   ```
 
-The read-only Qdrant observation for the `psd-clinical` collection on the legacy PSD
-bind `127.0.0.1:6333` was 163 `schema_table`, 2,275 `schema_column`, 2 `memory`, and
-1 `solved_question` point. Representative IDs are:
+The earlier full-payload scroll is out-of-scope and is not evidence for this package;
+it must not be repeated. The replacement read-only baseline for the `psd-clinical`
+collection on the legacy PSD bind `127.0.0.1:6333` used exact filtered counts and
+three-ID filtered scrolls only, with `with_payload:false` and `with_vector:false`.
+It observed 163 `schema_table`, 2,275 `schema_column`, 2 `memory`, and 1
+`solved_question` point. Representative IDs are:
 
 | Kind | Sample IDs |
 | --- | --- |
@@ -94,20 +100,36 @@ bind `127.0.0.1:6333` was 163 `schema_table`, 2,275 `schema_column`, 2 `memory`,
 
 `tht ... workspace vector inspect --json` was attempted read-only but was blocked by
 the local maintenance image's missing production `auth.yaml` / `AUTH_MODE=upstream`.
-The counts above therefore come from the Qdrant read-only scroll endpoint and must be
+The narrow Qdrant baseline is a provisional owner-gate observation and must be
 repeated through the successful `vector inspect` command immediately before the future
 authorized preprocessing action. No secret was read to bypass that guard.
 
 ### Reproducible no-write record
 
-The inspection used only these read operations; `git status --porcelain` was empty both
-before and after, and `git diff --quiet` succeeded after:
+The replacement inspection used only these read operations; `git status --porcelain`
+was empty both before and after, and `git diff --quiet` succeeded after. Each Qdrant
+count request carries only the `record_kind` filter and `exact:true`; each scroll
+request returns at most three point IDs, never payloads or vectors:
 
 ```bash
 git -C /Users/mp/projects/tht-workspace-psd rev-parse HEAD
 git -C /Users/mp/projects/tht-workspace-psd status --porcelain
 git -C /Users/mp/projects/tht-workspace-psd ls-tree -r --name-only HEAD -- psd-clinical/evidence
-node -e 'fetch("http://127.0.0.1:6333/collections/psd-clinical/points/scroll", {method:"POST", headers:{"content-type":"application/json"}, body:JSON.stringify({limit:4096,with_payload:true,with_vector:false})}).then(r => r.json()).then(x => console.log(x.result.points.length))'
+node <<'NODE'
+const endpoint = "http://127.0.0.1:6333/collections/psd-clinical/points";
+const kinds = ["schema_table", "schema_column", "memory", "solved_question"];
+const post = (path, body) => fetch(endpoint + path, {
+  method: "POST", headers: {"content-type": "application/json"}, body: JSON.stringify(body),
+}).then((response) => response.json());
+for (const kind of kinds) {
+  const filter = {must: [{key: "record_kind", match: {value: kind}}]};
+  const count = await post("/count", {filter, exact: true});
+  const sample = await post("/scroll", {
+    filter, limit: 3, with_payload: false, with_vector: false,
+  });
+  console.log(kind, count.result.count, sample.result.points.map((point) => point.id));
+}
+NODE
 git -C /Users/mp/projects/tht-workspace-psd diff --quiet
 ```
 
@@ -120,12 +142,14 @@ external mutations and manual acceptance.
 Record a separate PASS/FAIL and evidence for each item; never substitute an automated
 test for a human Git review.
 
-1. **Authoring and Git review.** In the authorized PSD clone, move only the approved
-   36 source paths to `evidence/source/`, run `tht evidence prepare`, verify exactly
-   one no-tool/no-session Pi call per changed source, inspect the Git diff, correct
-   every `review_item`, run `tht evidence validate`, and obtain the normal human Git
-   review. Confirm source renames/reclassifications retain IDs, semantic splits receive
-   new IDs, IDs use `evidence:<slug>`, and no orphan is deleted automatically.
+1. **Authoring and Git review.** In the authorized PSD clone, move exactly those 35
+   listed source documents to `evidence/source/`; retain
+   `psd-clinical/evidence/README.md` at its current path. Run `tht evidence prepare`,
+   verify exactly one no-tool/no-session Pi call per changed source, inspect the Git
+   diff, correct every `review_item`, run `tht evidence validate`, and obtain the
+   normal human Git review. Confirm source renames/reclassifications retain IDs,
+   semantic splits receive new IDs, IDs use `evidence:<slug>`, and no orphan is deleted
+   automatically.
 2. **Additive BM25 schema upgrade.** Before preprocessing, run vector inspect and save
    configuration, counts, and IDs. Run `workspace preprocess evidence`; verify the
    unnamed dense vector remains and only `bm25` with IDF is added. Do not accept a