fix(ci): bind remote fixture downstream source

docs/reports/verification/1050-c1-fix-round/documentation-checklist.md

@@ -2,10 +2,10 @@
 
 ## Required artifacts
 
-- [x] `docs/PRD.md` exists; #1050 C1 requirements remain current and unchanged.
-- [x] User guide: not applicable; no user-facing installer behavior changed.
+- [x] `docs/PRD.md` exists; #1050 C1 requirement 13 now binds the complete in-scope remote stack source chain and requires a per-path denominator.
+- [x] User guide: not applicable; no user-facing production installer behavior changed.
 - [x] Admin guide: not applicable; no operator procedure or deployment behavior changed.
-- [x] Developer guide: existing `docs/guides/installer-state-machine.md` already defines the fail-closed and immutable-remote contracts; this round adds verification evidence without changing the contract.
+- [x] Developer guide: existing `docs/guides/installer-state-machine.md` defines the fail-closed installer model; the C1-specific remote-arm contract and evidence live in the PRD, scratchpad, and scoped verification report.
 - [x] OpenAPI and endpoint index: not applicable; no API changed.
 - [x] Sitemap: not applicable; no navigation changed.
 
@@ -18,5 +18,6 @@
 ## Review and publishing
 
 - [x] Verification documentation is in the same logical change set as the shell-test remediation.
-- [x] Independent code and security reviews found no documentation blocker.
+- [x] Trust boundary states both halves: the digest proves fetched bytes remain identical through execution/verify-after; it does not authenticate authorship against provider/TLS compromise. Independent provenance is the inherited PRD v2 §3 deferral.
+- [x] Round-3 Codex code review APPROVE (confidence 0.92, zero findings) and security re-review risk NONE (confidence 0.96, zero findings). The initial HIGH trust-root finding remains documented as the canonical signed-provenance deferral, not hidden.
 - [x] Canonical evidence remains in-repo. No external publishing action was requested or performed.