docs(v1): define evidence-backed production contract

req: client_local/005\nreq: sync/009\nreq: accessibility/001\nreq: operations/001\nreq: security/001\nreq: performance/001\nreq: v1_release/001

docs/v1-readiness.md

@@ -1,10 +1,22 @@
 # v1 readiness audit
 
-This audit records the current hemx v1 northstar against the active Close when.
-It is not a marketing release announcement; it is the engineering closure record
-for the current v1 product-readiness goal. req: examples/001 req: public_api/001
+This audit records the proven server-first/page-enhanced baseline. It is not a
+marketing release announcement and no longer claims the full v1 north star is
+closed. The product evidence in `docs/v1-product-evidence.md` and current
+requirements add client-local WASM, durable offline/sync, accessibility,
+security, operations, performance, compatibility, and production-reference
+closure. Their implementation order lives in `PLAN.md`. req: examples/001 req: public_api/001 req: v1_release/001
 
-## Close-when status
+## Current status
+
+- Server-first and page-enhanced baseline: proven by the evidence below.
+- Client-local WASM: not implemented; first active v1 slice.
+- Durable offline/sync: contracts shaped, implementation blocked by the local
+  execution boundary.
+- Full production reference and v1 closure matrix: not yet proven.
+- Publishing and deployment: explicitly unauthorized.
+
+## Baseline evidence
 
 ### Canonical tutorial app
 
@@ -141,6 +153,11 @@ Evidence:
 
 ## Final closure gates
 
+The following baseline commands remain required. They are insufficient for full
+v1 closure until the browser/WASM/offline/multiplayer, accessibility, security,
+performance, compatibility, and production-reference proofs in `v1_release/*`
+also pass. Run them only as local validation; none publishes or deploys.
+
 Run these on the final tree before GOAL_DONE:
 
 ```sh