assembly of ingest pipeline

design/feature/recovery-pipeline/status.md

@@ -40,7 +40,7 @@
 
 | Bounded Context | Workflow Slice | Slice Discovery | Core Sketch | Blueprint | Design Security | Assembly | Impl Security | Refactor | Notes |
 | :-------------- | :------------- | :-------------- | :---------- | :-------- | :-------------- | :------- | :------------ | :------- | :---- |
-| `ingest-snapshot` | `deterministic-bundle-ingest` | `Complete` | `Complete` | `Complete` | `Ready` | `Not Started` | `Not Started` | `Not Started` | `Foundational source-of-truth slice.` |
+| `ingest-snapshot` | `deterministic-bundle-ingest` | `Complete` | `Complete` | `Complete` | `Complete` | `Ready` | `Not Started` | `Not Started` | `Foundational source-of-truth slice.` |
 | `dependency-recovery` | `identify-vendored-packages` | `Not Started` | `Not Started` | `Not Started` | `Not Started` | `Not Started` | `Not Started` | `Not Started` | `Shrinks app-authored surface before later phases.` |
 | `dependency-recovery` | `externalize-accepted-dependencies` | `Not Started` | `Not Started` | `Not Started` | `Not Started` | `Not Started` | `Not Started` | `Not Started` | `Depends on package identification decisions.` |
 | `static-context-evidence` | `extract-segment-context` | `Not Started` | `Not Started` | `Not Started` | `Not Started` | `Not Started` | `Not Started` | `Not Started` | `Produces deterministic evidence for downstream consumers.` |
@@ -84,20 +84,20 @@
 
 ### Design Security Gate
 
-- [ ] trust boundaries reviewed
-- [ ] authority and least privilege reviewed
-- [ ] sink and data-flow risks reviewed
-- [ ] blocking findings resolved or explicitly accepted
-- [ ] approved for assembly
+- [x] trust boundaries reviewed
+- [x] authority and least privilege reviewed
+- [x] sink and data-flow risks reviewed
+- [x] blocking findings resolved or explicitly accepted
+- [x] approved for assembly
 
 ### Assembly Gate
 
-- [ ] tests added
-- [ ] implementation completed
-- [ ] types pass
-- [ ] tests passing
-- [ ] effect AST checks run for modified Effect files
-- [ ] approved for implementation security review or next slice
+- [x] tests added
+- [x] implementation completed
+- [x] types pass
+- [x] tests passing
+- [x] effect AST checks run for modified Effect files
+- [x] approved for implementation security review or next slice
 
 ### Implementation Security Gate