docs: confirm REQ-021 implemented after BAT-017 merge

docs/srs/Data/req-021_import-provenance-sensitive-data-policy.md

@@ -1,6 +1,6 @@
 # req-021: Import provenance and sensitive-data policy
 
-- Status: Approved
+- Status: Implemented
 - Type: Data
 - Priority: High
 - Owner: 렛저장인
@@ -160,3 +160,47 @@
 #### Validation Plan
 - Validate through source-specific import tests, sensitive-field filtering/static scan, MCP exposure-level contract checks, fixture/log safety checks, full pytest, lint, relevant dashboard/MCP smoke, and baseline document updates.
 
+### CHG-20260709-01
+- Date: 2026-07-09
+- Author: 가웨인
+
+#### Change Summary
+- PR #2 merge 및 GitHub Actions CI 통과 근거로 REQ-021을 Implemented 상태로 전환했다.
+
+#### Intent
+- BAT-017 구현이 main canonical codebase에 반영되었고, import provenance/sensitive-data policy acceptance 기준이 merge-backed evidence로 충족되었음을 문서 상태에 반영한다.
+
+#### Acceptance Criteria Delta
+- Added:
+  - none
+- Updated:
+  - none
+- Removed:
+  - none
+
+#### Impacted Area Delta
+- Docs:
+  - `docs/srs/Data/req-021_import-provenance-sensitive-data-policy.md`
+  - `docs/srs/index.md`
+  - `docs/batches/index.md`
+  - `docs/batches/bat-017_20260708_import-provenance-sensitive-data-policy/index.md`
+  - `docs/batches/bat-017_20260708_import-provenance-sensitive-data-policy/verification.md`
+- Modules:
+  - merge-backed BAT-017 implementation from PR #2
+- Tests:
+  - GitHub Actions CI: contract-regression, dashboard-app-test, dashboard-http-smoke, db-safety-smoke, lint, pytest-regression all passed.
+
+#### Delivery Trace Delta
+- Batches:
+  - BAT-017 moved to release-candidate after PR #2 squash merge (`d9182f28f286667fb7ff52115c33ab2e5003b269`).
+- Releases:
+  - none yet
+
+#### Revalidation Impact
+- Reverification Needed: no for current implementation gate; release grouping remains separate.
+- Existing Implementation Invalidated: no
+- Status Recommendation: implemented
+- Follow-up Action: keep existing operating DB import evidence sanitization as separate follow-up Todo; do not treat it as part of destructive migration scope for REQ-021.
+
+#### Validation Plan
+- Merge-backed evidence verified through PR #2 CI plus local main ruff/full pytest after merge.