docs: record v0.5 release validation

docs/superpowers/plans/2026-09-13-v0.4-and-beyond.md

@@ -1,10 +1,13 @@
 # Argand Site Registry v0.4 and Beyond Plan
 
-> **Status:** Version 0.4 phases 0 through 2 implemented and security-reviewed.
-> Phases 3 and later remain the sequenced roadmap.
+> **Status:** Version 0.5 phases 0 through 3 and the ROR adapter in task 4.1 are
+> implemented, provider-scale tested, and security-reviewed. MusicBrainz and GND
+> remain rights/schema-gated candidates. Phases 5 through 7 describe later releases,
+> including the human-reviewed public dataset; they are not version 0.5 exit work.
 >
-> **Baseline:** Clean `main` at `2861337`; runtime behavior is the tagged
-> `v0.3.0` release at `ac82820`. The complete v0.3 acceptance suite passes.
+> **Current implementation:** signed commit `557ba7c` (version 0.5.0). The plan's
+> original audited baseline was clean `main` at `2861337` with tagged `v0.3.0`
+> runtime behavior at `ac82820`.
 >
 > **Execution constraint:** Work in this standalone repository only. Do not use
 > subagents, edit Argand's main checkout, share its build cache, acquire paid data,
@@ -595,22 +598,25 @@ Reference:
 
 ### Task 4.4: Keep lower-priority candidates behind explicit holds
 
-- [ ] ORCID: research a low-confidence individuals-only adapter. Its public file is
+- [x] ORCID: research a low-confidence individuals-only adapter. Its public file is
       CC0, but links are self-declared and require privacy, impersonation, and
       volatility policy. Never auto-approve. Reference:
       <https://info.orcid.org/public-data-file-use-policy/>.
-- [ ] OpenAlex: use only for research-activity/popularity metadata if useful. Record
+- [x] OpenAlex: use only for research-activity/popularity metadata if useful. Record
       ROR as upstream lineage and never count its institution website as independent
       corroboration. Reference: <https://help.openalex.org/data/institutions/>.
-- [ ] OpenStreetMap: do not ingest until an ODbL-compatible distribution and
+- [x] OpenStreetMap: do not ingest until an ODbL-compatible distribution and
       attribution architecture is approved. Reference:
       <https://osmfoundation.org/wiki/Licence_and_Legal_FAQ>.
-- [ ] Government/corporate registries: assess jurisdiction by jurisdiction. Prefer
+- [x] Government/corporate registries: assess jurisdiction by jurisdiction. Prefer
       stable identity crosswalks; do not infer a website where no authoritative field
       exists.
-- [ ] DNS, RDAP, certificate transparency, package registries, and web crawl data:
+- [x] DNS, RDAP, certificate transparency, package registries, and web crawl data:
       evaluate as observation sources only after exact terms are verified.
-- [ ] Open Library and other sources with unresolved underlying rights remain excluded.
+- [x] Open Library and other sources with unresolved underlying rights remain excluded.
+
+Task 4.4 completion note: the reviewed hold states and their next admission gates
+are maintained in `docs/SOURCE-CANDIDATES.md`; none of these sources is ingestible.
 
 ### Phase 4 acceptance
 
@@ -769,16 +775,16 @@ Reference:
 
 ## Documentation deliverables
 
-- [ ] Keep the README focused on the first successful verified lookup.
-- [ ] Add an architecture document explaining assertion, observation, decision, policy,
+- [x] Keep the README focused on the first successful verified lookup.
+- [x] Add an architecture document explaining assertion, observation, decision, policy,
       generation, delta, and consumer boundaries.
-- [ ] Expand `LICENSE_SOURCES.md` for every admitted source with exact fields consumed,
+- [x] Expand `LICENSE_SOURCES.md` for every admitted source with exact fields consumed,
       source URLs, licenses, attribution, redistribution, update cadence, and lineage.
-- [ ] Document active versus audit export semantics.
-- [ ] Document migrations and legacy decision handling.
+- [x] Document active versus audit export semantics.
+- [x] Document migrations and legacy decision handling.
 - [ ] Publish the reference review and incident policies.
-- [ ] Publish provider-scale measurements without implying serving or corpus coverage.
-- [ ] Maintain a source-candidate table showing approved, research, held, and rejected
+- [x] Publish provider-scale measurements without implying serving or corpus coverage.
+- [x] Maintain a source-candidate table showing approved, research, held, and rejected
       sources with the reason for each state.
 
 ## SWOT-driven checks