docs: confirm REQ-021 implemented after BAT-017 merge

docs/batches/bat-017_20260708_import-provenance-sensitive-data-policy/verification.md

@@ -1,6 +1,6 @@
 # BAT-017 Verification Evidence
 
-- Status: ready-for-qc
+- Status: passed-merged
 - Created At (KST): 2026-07-08 11:33 KST
 
 ## Verification Commands
@@ -30,4 +30,20 @@
 - Full pytest includes the affected import/privacy regression suite and leaves 4 skips in place without introducing new failures.
 - Import batch debug-gated exposure now requires explicit `debug_provenance_gate=True`; the regression suite covers both deny-without-gate and allow-with-gate behavior.
 - BAT-017 touched MCP import batch exposure behavior but did not modify dashboard code paths directly; no additional dashboard-only code change was required in this slice.
-- QC still needs to independently inspect the changed surfaces, validate the documentation updates, and classify the missing StagePilot doctor entrypoint.
+- Independent QC completed through BAT-017 delivery; QC requested explicit debug gate enforcement, runner applied it, and the second QC handoff passed.
+
+
+## Merge-backed Verification
+- PR: https://github.com/genichin/jarca-ledger-mcp/pull/2
+- Merge commit: `d9182f28f286667fb7ff52115c33ab2e5003b269`
+- GitHub Actions before merge:
+  - `contract-regression`: pass
+  - `dashboard-app-test`: pass
+  - `dashboard-http-smoke`: pass
+  - `db-safety-smoke`: pass
+  - `lint`: pass
+  - `pytest-regression`: pass
+- Local main verification after merge:
+  - `. .venv/bin/activate && python -m ruff check .` → pass (`All checks passed!`)
+  - `. .venv/bin/activate && python -m pytest -q` → pass (`59 passed, 4 skipped`)
+- StagePilot doctor entrypoint remains unavailable in this runtime and is classified as environment/tooling debt, not a BAT-017 behavior blocker.