Update validation docs for evidence export smoke

README.md

@@ -31,7 +31,7 @@ The hosted smoke runner checks the HF Space SHA, the static host's `x-repo-commi
 
 The hosted smoke runner records the exact Space SHA, Hub API card configuration, and static host commit in `/tmp/browser-speak-hosted-smoke.json`; the app also shows the served build in the Runtime panel and includes it in **Download JSON** exports. The latest May 28, 2026 hosted smoke in this workspace passed desktop/mobile UI checks and the monitored benchmark phase reported 0 network requests, 0 server-inference suspects, and 0 benchmark errors while running TTS, identity, and loopback rows. The Hub API parses the Space card as `sdk: static` with `app_file: index.html`; `hf spaces info` may still surface a non-blocking static-runtime `CONFIG_ERROR`, so the authoritative deploy checks are the static host `x-repo-commit` header plus hosted smoke results.
 
-Current validation status from `/tmp/browser-speak-evidence-summary.json`: demo files, UI smoke, client-side/no-server smoke, 3-run synthetic loopback, first-TTS-chunk safety, hosted Space no-server smoke, and artifact freshness pass. The remaining required external evidence is three real human microphone rows and at least one completed hardware WebGPU row from a browser that exposes a real GPU adapter instead of SwiftShader.
+Current validation status from `/tmp/browser-speak-evidence-summary.json`: demo files, UI smoke, evidence-export smoke, client-side/no-server smoke, 3-run synthetic loopback, first-TTS-chunk safety, hosted Space no-server smoke, and artifact freshness pass. The remaining required external evidence is three real human microphone rows and at least one completed hardware WebGPU row from a browser that exposes a real GPU adapter instead of SwiftShader.
 
 On a laptop or desktop with a real microphone, run this from the repo to collect hosted browser evidence in one pass:
 
@@ -128,7 +128,7 @@ Use `node tools/run-webgpu-benchmark.mjs` on a real WebGPU browser to compare br
 
 Use `node tools/audit-validation.mjs` as the final evidence gate. It reads the default JSON artifacts from `/tmp`, writes `/tmp/browser-speak-validation-audit.json`, and requires passing UI smoke, client-side/no-server smoke, 3-row loopback stability, first-TTS-chunk boundary safety, real human microphone rows with no fake-capture Chrome flags, and at least one completed hardware WebGPU candidate. The current container is expected to fail the last two gates because no real microphone artifact exists and Chrome exposes SwiftShader instead of a hardware adapter. Set `BROWSER_SPEAK_AUDIT_SOFT=true` to write the audit without a failing exit code, or set `BROWSER_SPEAK_AUDIT_REQUIRE_REAL_MIC=false` / `BROWSER_SPEAK_AUDIT_REQUIRE_HARDWARE_WEBGPU=false` only for local development checks.
 
-Use `node tools/run-final-validation.mjs` to rerun the full validation sequence and write `/tmp/browser-speak-final-validation.json`. By default it runs UI smoke, client-side/no-server smoke, loopback stability, the WebGPU benchmark/probe, and the final audit; it skips real-microphone capture unless `BROWSER_SPEAK_FINAL_REAL_MIC=true` is set because that step needs a human speaker and real input device. Use `BROWSER_SPEAK_FINAL_REAL_MIC=dry-run` for a display/microphone preflight only, `BROWSER_SPEAK_FINAL_SOFT=true` to complete local runs while still recording audit failures for missing real-mic or hardware-WebGPU evidence, and `BROWSER_SPEAK_FINAL_SKIP_LOCAL=true` or the narrower `BROWSER_SPEAK_FINAL_SKIP_UI=true` / `BROWSER_SPEAK_FINAL_SKIP_CLIENT_SIDE=true` / `BROWSER_SPEAK_FINAL_SKIP_LOOPBACK=true` / `BROWSER_SPEAK_FINAL_SKIP_WEBGPU=true` switches when reusing fresh artifacts. The final JSON separates each step's `commandStatus` from `evidenceStatus`, so a soft audit can show `commandStatus: "pass"` while the overall `passed` field remains `false` until every required evidence gate is satisfied.
+Use `node tools/run-final-validation.mjs` to rerun the full validation sequence and write `/tmp/browser-speak-final-validation.json`. By default it runs UI smoke, evidence-export smoke, client-side/no-server smoke, loopback stability, the WebGPU benchmark/probe, and the final audit; it skips real-microphone capture unless `BROWSER_SPEAK_FINAL_REAL_MIC=true` is set because that step needs a human speaker and real input device. Use `BROWSER_SPEAK_FINAL_REAL_MIC=dry-run` for a display/microphone preflight only, `BROWSER_SPEAK_FINAL_SOFT=true` to complete local runs while still recording audit failures for missing real-mic or hardware-WebGPU evidence, and `BROWSER_SPEAK_FINAL_SKIP_LOCAL=true` or the narrower `BROWSER_SPEAK_FINAL_SKIP_UI=true` / `BROWSER_SPEAK_FINAL_SKIP_EVIDENCE_EXPORT=true` / `BROWSER_SPEAK_FINAL_SKIP_CLIENT_SIDE=true` / `BROWSER_SPEAK_FINAL_SKIP_LOOPBACK=true` / `BROWSER_SPEAK_FINAL_SKIP_WEBGPU=true` switches when reusing fresh artifacts. The final JSON separates each step's `commandStatus` from `evidenceStatus`, so a soft audit can show `commandStatus: "pass"` while the overall `passed` field remains `false` until every required evidence gate is satisfied.
 
 Use `node tools/summarize-evidence.mjs` after local, hosted, browser-downloaded, real-mic, or WebGPU runs to consolidate the current evidence into `/tmp/browser-speak-evidence-summary.json`. It reports artifact freshness against the current source fingerprint, hosted no-server status, browser-downloaded evidence status, local audit checks, and the next missing actions.