Explain frozen evaluation groups and historical source preflight
Document pinned real-task identity audit and remaining source constraints