Make deployment truth and remaining graduation gates explicit

Document the runnable Docker workflow, expected one-shot container exits, server-controlled Bailian namespace switch, current earned progress, and the security and evaluation work that still blocks private-data or graduation release claims.

Constraint: Current local Bailian credentials are rejected by the configured workspace

Rejected: Mark the project complete from synthetic metrics | would overstate provider, OCR, authorization, and blind-evaluation readiness

Confidence: high

Scope-risk: narrow

Directive: Keep progress evidence task-based and distinguish synthetic engineering validation from real geological efficacy

Tested: make verify-design; Markdown links; secret scan; diff checks

Not-tested: Final thesis review and live provider authorization

docs/03-implementation-plan.md

@@ -165,7 +165,12 @@ features/chat/
 
 每个阶段都必须形成“功能 + 测试 + 文档 + 提交 + 推送”的闭环。
 
-### 阶段 0：仓库、安全和设计基线（当前阶段）
+截至 2026-07-13，核心 synthetic 上传→解析→审核→向量化→检索链已在 Docker 中连续两次
+通过，当前门禁记录为 296 项后端测试和 53 项前端测试。以下阶段描述仍是最终 Definition of
+Done，不因部分能力提前落地而降低验收标准；实时完成度和剩余项以
+[04-project-todo.md](04-project-todo.md) 为准。
+
+### 阶段 0：仓库、安全和设计基线
 
 交付：