docs(accuracy): refresh governed scan and training evidence

scripts/build_detection_model_promotion_report.py

@@ -324,7 +324,14 @@ def build_decisions(args: argparse.Namespace) -> dict[str, Any]:
     )
 
     return {
+        "schema_version": 2,
         "generated_at": datetime.now(timezone.utc).isoformat(),
+        "promotion_authority": "legacy_diagnostic_only",
+        "runtime_activation_allowed": False,
+        "activation_requirement": (
+            "A separate successful Phase-4/5 release-gate report must bind the exact "
+            "candidate key and model SHA-256 before activation."
+        ),
         "positive_portfolio_path": str(portfolio_path),
         "hard_negative_summary_paths": [str(path) for path in background_paths],
         "background_split_summary_paths": [str(path) for path in split_summary_paths],
@@ -350,6 +357,9 @@ def write_markdown(report: dict[str, Any], path: Path) -> None:
         f"- Hard-negative summaries: {len(report['hard_negative_summary_paths'])}",
         f"- Background split summaries: {len(report['background_split_summary_paths'])}",
         f"- Candidates: {report['candidate_count']}",
+        f"- Authority: `{report['promotion_authority']}`",
+        "- Runtime activation: **not authorized by this report**",
+        f"- Activation requirement: {report['activation_requirement']}",
         "",
         "## Gates",
         "",