v3.2 Evidence freshness mechanism

What changed

• Evidence freshness mechanism shipped (spec cpr-freshness-mechanism-spec-2026-10-14): every evidence card's .data-src now carries a machine-readable data-asof attribute, so rendering and freshness checks read a single source. Cards not re-verified within 14 days automatically gain a pending re-verification badge and a dashed de-emphasis outline; past 30 days the number zone switches to a "verifying" placeholder instead of presenting stale figures as current. Historical archive cards (e.g. the 2026-09-27 incident review) are fixed records and are exempt.
• Recompute-only, never re-date (this round's receipts): 5 life skills (counted in the skills directory), 10 activated teams (counted in the roster), 7 executives (counted in Organization public v2), 4 verifiable founder facts (checked one by one against public records), 0 named-evidence items (site-wide recount still zero) — five dates restamped to 2026-10-16 on recompute receipts, archived at deliverables/dispatch-2026-10-16/freshness-recalc-receipt-2026-10-16.md.
• The 309 backend-test figure was deliberately NOT restamped: a full local re-run (488 tests: 459 passed / 25 failed / 4 errors) could not reproduce the original counting basis, so the figure and its 2026-10-15 date stand pending a counting-environment review; the freshness mechanism guarantees it surfaces automatically once stale.
• Build log rolling: this entry is this week's real entry; build-log.json gained its 2026-10-16 entry (21 total). The freshness sentinel now judges card by card (website-freshness-check A11).

Release check conclusions

• Three gates: data-room sensitive scan WARN (only the public contact email contact@vertciti.com, cleared for publication on review) / touch-target gate PASS (all 560 interactive elements >=44x44) / zh-en mirror parity PASS.
• The new inline script's sha256 was synced into vercel.json; under the enforced production CSP, a real browser rendered both languages with zero script refusals, and aged simulations (26d / 45d) showed the badge and the verifying placeholder live, with the archive-card exemption behaving correctly.