feat(perception): gate sealed truth evaluation

docs/01_IMPLEMENTATION_PLAN.md

@@ -17,6 +17,7 @@ Each gate produces evidence and an explicit GO, PAUSE or BLOCKED result.
 | E31 binding sensitivity | MEASURED — E45 closes accounting for 87/87 accepted correspondences and finds no material monotonic residual association with represented image radius, rig speed or pose age. It does not supply calibration-target truth or outer-fisheye coverage. |
 | Detector Truth Island | PREPARED — E46 freezes 32 references with no prelabels, predictions, scores or candidate identity in the review package. Two independent reviews and adjudication are still required. |
 | Detector candidate comparison | FROZEN BEFORE TRUTH — E47 freezes raw-KB4 and fixed-valid-FOV-fill predictions from the same exact Mask R-CNN checkpoint. No accuracy result or winner exists before the E46 truth seal. |
+| Detector truth/evaluation executors | READY, NOT RUN — E48 fail-closed review/adjudication sealing and separate post-seal E49 scoring are implemented. Neither result exists because real independent reviews are absent. |
 | Product interface | DEFERRED — no new windows, page anatomy or design changes are part of this stabilization increment. |
 
 The governing decision is

docs/20_RAVNOVES00_REFERENCE_SOURCE_PRODUCT_PLAN.md

@@ -170,6 +170,14 @@ these counts are descriptive rather than accuracy evidence. No truth was
 joined, no winner was selected and no retraining is authorized before the E46
 truth seal.
 
+E48 and E49 executors are prepared but have not produced results. E48 validates
+two distinct blind-review identities, exact 32-frame coverage, model-free
+annotation fields, explicit adjudication and review hashes while reading only
+the E47 manifest identity. E49 is physically downstream of an accepted E48
+seal and computes the frozen AP/AR, miss, large-box, valid-FOV-centre leakage
+and temporal class-count metrics. It cannot select a candidate automatically.
+No E48/E49 result exists until two real reviews and adjudication are supplied.
+
 E43 immutable protocol
 `e43-future-capture-protocol-28f091b9648daffce988d44c183e21f56d77988061630de934f8003fb13701d8`
 preregisters the later same-K1/new-route transfer. It requires the same mount,