docs(release): clarify REL-012 provenance gates

docs/releases/rel-012_20260717_cost-basis-safe-sync-seed-hotfix.md

@@ -19,9 +19,10 @@ portfolio-hub의 기존 cost-basis 응답에서 canonical `cost_basis_per_unit`
 | --- | --- | --- |
 | Remote `origin/main` | `18bd8d9f0b7bb76b08303bbf8743e6ddf916de89` (2026-07-17 fetch) | BAT-058 source is **not included** in this remote revision. |
 | BAT-058 candidate | [`81a853a`](https://github.com/fourblocks2020/trex-core/commit/81a853a314391da7a8bc9df5517013c7fd296d61) on `origin/feat/dcy-038-cost-basis-safe-sync-seed` | Reviewed code + BAT/REL/runbook source is published; target remains subject to production approval. |
-| Immutable deploy target | [`81a853a`](https://github.com/fourblocks2020/trex-core/commit/81a853a314391da7a8bc9df5517013c7fd296d61) | Published and remote-ref verified 2026-07-17; operations independently re-verifies before execution. |
+| Immutable deploy payload | [`81a853a`](https://github.com/fourblocks2020/trex-core/commit/81a853a314391da7a8bc9df5517013c7fd296d61) | Published and remote-ref verified 2026-07-17; this is the immutable **code/test payload** used for the daemon checkout. |
+| Authoritative release manifest | This REL-012/runbook revision on PR #43 | A docs-only successor of `81a853a`; it is **not** the daemon payload. Before execution, operations records both the immutable payload SHA and the exact manifest commit URL used for the approved runbook. |
 
-This document is a release draft and a preflight request only. It does **not** authorize deployment, daemon restart, broker/portfolio access, `sync --live`, database writes, configuration activation, or credential access.
+The immutable daemon deploy payload and the release manifest have distinct roles: `81a853a` is the verified code/test payload; the REL-012/runbook document is an immutable docs-only successor on the same PR. Operations must record both revisions in its evidence. This document is a release draft and preflight request only. It does **not** authorize deployment, daemon restart, broker/portfolio access, `sync --live`, database writes, configuration activation, or credential access.
 
 ## Included scope
 
@@ -48,14 +49,14 @@ A single-target `sync --live --yes` remains a separately approved post-release a
 | Focused Ruff | **PASS** | Changed adapter/reconcile/CLI and relevant tests: `All checks passed!`. |
 | Focused compile check | **PASS** | Six changed source/test paths, `compileall -q`, exit `0`. |
 | Live broker, live PostgreSQL, production deploy | **NOT EXECUTED** | Outside batch verification and this draft; no claim is made. |
-| Source publication | **PENDING** | No immutable remote candidate SHA exists yet. |
+| Source publication | **PUBLISHED** | Immutable daemon payload [`81a853a`](https://github.com/fourblocks2020/trex-core/commit/81a853a314391da7a8bc9df5517013c7fd296d61) is remote-ref verified on `origin/feat/dcy-038-cost-basis-safe-sync-seed`; authoritative REL/runbook is a docs-only successor in PR #43. Operations records both revisions before execution. |
 
 ## Release approval gates
 
 All items must be satisfied before operations executes the runbook:
 
 - [x] Git-ops published the reviewed source and initial REL/runbook draft; target `81a853a` is remote-ref verified on `origin/feat/dcy-038-cost-basis-safe-sync-seed`.
-- [ ] Operations verifies that exact target SHA contains REL-012 and its runbook, and captures the actual deployed revision as `ROLLBACK_REVISION`.
+- [ ] Operations verifies the exact immutable daemon payload SHA **and** records the exact immutable REL/runbook manifest commit URL used for the run; captures the actual deployed revision as `ROLLBACK_REVISION`.
 - [ ] User/approver explicitly authorizes production execution and the approved off-market window is recorded.
 - [ ] Operations confirms the source checkout is clean; existing runtime configuration and credential/break-glass modes will not change.
 - [ ] Operations confirms no dependency or migration delta exists between `ROLLBACK_REVISION` and the exact target SHA.