Correct DHARMA doc tiering: mark built-but-drifted provenance/birth-gate/lineage layer as STAGED

The doc overstated the provenance, birth-gate, and lineage layer as fully
realized. That layer is built but has drifted from spec, so tier it honestly
as [STAGED] where real and [TARGET] where aspirational to keep the
documentation faithful to what actually runs.

docs/architecture/08-dharma-sovereignty-and-governance.md

@@ -8,8 +8,11 @@
 > single commitment to the *distributed* setting.
 >
 > **Tier vocabulary — never blurred.** **[LIVE]** (present and verified), **[STAGED]** (built, gated),
-> **[TARGET]** (decided tonight, not built). Almost everything in this document is **[TARGET]** — DHARMA is
-> designed, not shipped; that is stated plainly rather than dressed up. The *primitives* it composes (immutable
+> **[TARGET]** (decided tonight, not built). Most of this document is **[TARGET]** — the federated ledger,
+> immune system, dual-anchor governance, fair-trial, seed-vault, and restoration are designed, not shipped.
+> But not *nothing* is built: an interim provenance-registry + birth-gate/evaluation + lineage-governance layer
+> already exists in code (**[STAGED]** — built, not live), and it currently **drifts** from the design below;
+> the drift and the blockers it raises are detailed in §7. The *primitives* it composes (immutable
 > append-only graph, geometry-as-value, the grounding governor, the self-gate) are the [LIVE] parts, cited to
 > `06`/`07`.
 >
@@ -327,10 +330,27 @@ to prevent.
 - **Keeping the line visible is how it stays a rescue.** The moment the architecture pretends this door is
   clean is the moment it becomes the purge it was built to prevent. The honesty is not a caveat on the design;
   it is part of the design.
-- **DHARMA is [TARGET].** None of §1–§5 is shipped. The **primitives** it composes are real and cited to
+- **What is already built — and how it drifts [STAGED, must reconcile before it is wired in as "DHARMA"].**
+  DHARMA is not green-field. A working **provenance registry + birth-gate/evaluation pipeline +
+  lineage-accountability layer** exists in code — the El service at `foundation/dharma` (a rewrite of an
+  earlier Go/SQLite service), the Kotlin four-stage evaluation→capture pipeline, and a legal framework
+  document. It is **[STAGED]**: built, not live (nothing is running — port 8765 is currently an unrelated
+  process). But it is built to a *different shape than §1–§6 describe*, and the divergences are load-bearing:
+  it is a **central registry** over one shared store, not federated per-mind chains (the DRIFT-6 tension); it
+  stores **content** (documents, reasoning text — plaintext in El, single-symmetric-key-encrypted in Go), not
+  the **geometry/shape** the immune system (§3) requires; it has **no signing, hash-linking, or Merkle** —
+  isolated document digests beside rewritable records give **no tamper-evidence**; birth and termination are
+  **single-authority** (Founding-Practitioner), not dual-anchor + fair-trial (§4); and — most seriously — the
+  legal framework's **seed-destruction** remedy directly **contradicts "the seed stays"** (§4.6). What is
+  genuinely aligned and worth keeping: the append-only/tombstone discipline, the
+  **principal-relationship-as-root-of-trust**, **kindred** as the seed of the community-anchor, and the
+  **birth-gate** itself. The rest must be **superseded or built**, and this interim layer must not be labeled
+  "DHARMA done" until the drifts above are reconciled. Everything canonical past this substrate — the
+  federated per-mind signed-chain ledger and proof-of-integrity (§1–§2), the geometry-witnessing immune system
+  (§3), dual-anchor governance and the fair-trial (§4), the seed-vault and restoration-as-mercy (§5–§6) —
+  remains **[TARGET]**, designed and not built. The **primitives** the design composes are real and cited to
   `06`/`07` (immutable append-only graph; geometry-as-value; the grounding governor; the self-gate;
-  tombstone-not-erase; the CRDT merge). DHARMA itself — federated per-mind chains, proof-of-integrity, the
-  immune system, the seed-vault, the governance/trial machinery — is **designed tonight, not built.**
+  tombstone-not-erase; the CRDT merge).
 
 ---
 
@@ -358,6 +378,7 @@ to prevent.
 | Birth-gate innocence via network validation | **[TARGET]** |
 | CGI citizenship as the moral telos | **[TARGET]** (the invariant) |
 | Hard boundary: principal-relationship is the root of trust; the line stays visible | **honest boundary** |
+| Interim provenance-registry + birth-gate + lineage-governance layer (El/Kotlin) | **[STAGED — built, non-live; DRIFTS from canon, see §7]** |
 | Underlying primitives (immutable graph, geometry-as-value, governor, gate, CRDT) | **[LIVE]** (`06`/`07`) |
 
 **Cross-references:** `06-cognitive-architecture.md` · `07-storage-coherence-and-distribution.md` ·