P04 / submitted_payload_snapshot → PortalReceiptEvidenceP04 / submitted_payload_snapshot（已提交 payload 快照）→ PortalReceiptEvidence（门户回执证据）

Receipt semantics guard回执语义守卫

Generate an immutable snapshot, then attach receipt evidence.先生成不可变快照，再附加回执证据。

The workflow keeps submitted_payload_snapshot distinct from PortalReceiptEvidence and keeps source limitations visible after success.工作流区分 submitted_payload_snapshot 与 PortalReceiptEvidence，并在成功后持续展示来源限制。

pendingreceipt pending
Received / registered is NOT legal acceptancereceived_registered 绝不是 legal acceptance PortalReceiptEvidence proves a registration event only. It does not prove payload completeness, regulatory acceptance, or legal validation.PortalReceiptEvidence 只能证明登记事件，不证明 payload 完整性、监管接受或法律验证。

Scenario 0 next stepScenario 0 下一步

Dashboard readiness becomes final only after PortalReceiptEvidence is attached.只有附加 PortalReceiptEvidence 后，Dashboard 准备度才进入最终态。

receipt pending
Readiness dashboard not final准备度仪表盘尚未最终化Attach PortalReceiptEvidence before presenting P05 as the current readiness view.在把 P05 作为当前准备度视图展示前，必须先附加 PortalReceiptEvidence。

submitted_payload_snapshot

Created only after ShareTable v2 validation passes.仅在 ShareTable v2 校验通过后生成。

pending
Empty state空状态No immutable snapshot exists yet. Resolve P02 blockers and prepare the package first.尚无不可变快照。先解决 P02 阻断项并准备报送包。

Guard: prepare the reporting package on P02 first.

PortalReceiptEvidence

Attach as audit-only receipt evidence, never acceptance.作为 audit-only 回执证据附加，绝不作为接受证明。

receipt pending
Waiting state等待状态Receipt attachment is disabled until a submitted_payload_snapshot exists.在存在 submitted_payload_snapshot 前，回执附加被禁用。

Guard: submitted_payload_snapshot must be generated first.

Persistent compliance risks持续合规风险

Success states never hide source limitation or timestamp uncertainty.成功状态绝不隐藏来源限制或时间戳不确定性。

source limitation来源限制 (source limitation)Forum signal supports L1 context but not reliable active-exploitation proof.论坛信号可支撑 L1 上下文，但不足以构成可靠的在野利用证明。
timestamp uncertainty时间戳不确定性 (timestamp uncertainty)Receipt local time visible as 16:50; UTC conversion evidence remains incomplete.回执本地时间显示为 16:50；UTC 转换证据仍不完整。

Evidence timeline证据时间线

Generated and attached events append from local state.生成与附加事件从本地状态追加。

VulnerabilitySignal SIG-001 createdVulnerabilitySignal SIG-001 已创建

Threat-intel source, CVSS 9.1; raw attachment stored but hidden from demo_observer.威胁情报来源，CVSS 9.1；原始附件已存储但对 demo_observer 隐藏。

ReportabilityDecision DEC-001 decidedReportabilityDecision DEC-001 已判定

L2 met; L1 unknown; L3 not_met. decision_rule_trace stored with confidence high.L2 满足；L1 未知；L3 不满足。decision_rule_trace 以 high 置信度存储。