docs: confirm REQ-021 implemented after BAT-017 merge

docs/batches/bat-017_20260708_import-provenance-sensitive-data-policy/index.md

@@ -1,7 +1,7 @@
 # BAT-017: Import provenance and sensitive-data policy
 
 - Profile: standard
-- Status: draft
+- Status: release-candidate
 - Included REQ: REQ-021
 - Source Discovery: dcy-014
 - Created At (KST): 2026-07-08 11:33 KST
@@ -33,3 +33,11 @@ Deliver the approved REQ-021 scope for normalized import provenance, `raw_payloa
 ## Delivery Notes
 - User explicitly prohibited Kanban; delivery execution must use direct branch/PR or a dedicated non-Kanban worktree if delegated.
 - Implementation should be sliced to avoid the previous BAT-016 large-card failure pattern: provenance helpers first, source adapters second, MCP/Streamlit exposure third, tests/docs last.
+
+
+## Merge Evidence
+- PR: https://github.com/genichin/jarca-ledger-mcp/pull/2
+- Merge commit: `d9182f28f286667fb7ff52115c33ab2e5003b269`
+- Merged At: 2026-07-09 18:44 KST
+- GitHub Actions: contract-regression, dashboard-app-test, dashboard-http-smoke, db-safety-smoke, lint, pytest-regression all passed before merge.
+- Local post-merge verification: `. .venv/bin/activate && python -m ruff check .` pass; `. .venv/bin/activate && python -m pytest -q` pass (`59 passed, 4 skipped`).