Make the governed RAG evidence path executable end to end

Separate local parsing from model indexing, bind review decisions to immutable manifests, persist vectors behind active profiles, and expose retrieval, chat, evaluation, and document workflows through the React workbench.

Constraint: Live Bailian authentication currently fails for all three configured capabilities

Rejected: Direct upload-to-embedding flow | bypasses local review and manifest binding

Confidence: high

Scope-risk: broad

Directive: Keep private-data deployment blocked until authentication, RBAC, and separate database roles land

Tested: make verify; fresh and replay Docker document smoke; worker recovery smoke; frozen synthetic evaluation; migration 0003-0004 roundtrip

Not-tested: Successful live Bailian calls, OCR, real multi-user authorization

Makefile

@@ -1,7 +1,26 @@
-.PHONY: setup-hooks check-secrets docs-check links-check verify-design backend-sync \
+.PHONY: setup-hooks up down status logs seed-offline smoke-document \
+	check-secrets docs-check links-check verify-design backend-sync \
 	backend-format backend-lint backend-type backend-test backend-check compose-check \
 	frontend-sync frontend-format frontend-lint frontend-type frontend-test \
-	frontend-build frontend-check verify-ci verify
+	frontend-api-contract frontend-build frontend-check verify-ci verify
+
+up:
+	docker compose up -d --build
+
+down:
+	docker compose down
+
+status:
+	docker compose ps -a
+
+logs:
+	docker compose logs --tail=200
+
+seed-offline:
+	docker compose --profile tools run --rm seed-demo-offline
+
+smoke-document:
+	docker compose --profile tools run --rm document-pipeline-smoke
 
 setup-hooks:
 	git config core.hooksPath .githooks
@@ -18,6 +37,9 @@ docs-check:
 	test -f docs/04-project-todo.md
 	test -f docs/05-stage1-runbook.md
 	test -f docs/06-frontend-demo-runbook.md
+	test -f docs/07-retrieval-worker-evaluation-runbook.md
+	test -f docs/08-grounded-chat-runbook.md
+	test -f docs/09-document-ingestion-indexing-runbook.md
 
 links-check:
 	python3 scripts/check_markdown_links.py
@@ -52,6 +74,9 @@ frontend-format:
 frontend-lint:
 	cd frontend && npm run lint
 
+frontend-api-contract:
+	cd frontend && npm run check:api
+
 frontend-type:
 	cd frontend && npm run typecheck
 
@@ -61,7 +86,7 @@ frontend-test:
 frontend-build:
 	cd frontend && npm run build
 
-frontend-check: frontend-sync frontend-format frontend-lint frontend-type frontend-test frontend-build
+frontend-check: frontend-sync frontend-format frontend-api-contract frontend-lint frontend-type frontend-test frontend-build
 
 compose-check:
 	docker compose --env-file .env.example config --quiet