Document pinned real-task identity audit and remaining source constraints
Document deferred helper tradeoff and failed unchanged gate