docs: publish the Beta 2 evidence addendum

AI-assisted drafting and verification; maintainer review and responsibility retained.

Signed-off-by: Cole Speelman <crspeelman@gmail.com>

PUBLIC-SNAPSHOT.json

@@ -1 +1 @@
-{"schema_version":2,"project":"sandwich-hime","export_policy":"exact-allowlist-v1","export_mode":"release","file_count":90,"allowlist_sha256":"393ee598dc7e12cdbb603887bf06599e46b40d7c19e4ff693a818cc32afb01ec","manifest_sha256":"655bfadbddf5967288147f5b1762debd3f4b106d86c044706c41cf6aabca5e00"}
+{"schema_version":2,"project":"sandwich-hime","export_policy":"exact-allowlist-v1","export_mode":"release","file_count":90,"allowlist_sha256":"393ee598dc7e12cdbb603887bf06599e46b40d7c19e4ff693a818cc32afb01ec","manifest_sha256":"38a02b05cec70c82076df0f40de8b98edfc9280f54c12fa0cbe84949da253fdf"}

PUBLIC-SNAPSHOT.sha256

@@ -28,7 +28,7 @@ c3ac873ae2e6248e1d86dd542a11557b24b8dba80e4785f3bc1018152020235c  ./README.md
 5f4ac209a16ab110baeaa64a40c19d9239c903e17550c3f05e1e1473ddcc33a3  ./docs/DEVELOPMENT_SERVER.md
 51aa57a81131b64f76c45552122de842f22be92d81c8bba8f6fd38a18a7670d6  ./docs/DIAGNOSTICS.md
 a62cc7174f3c92d8ef77e4bd9607fbf5d4b80bc514ff05bd433c02a9b0578f18  ./docs/LANGUAGE_SERVER.md
-965a6ae57a8162c3af81f4987771e88617247f903088d210720ea2afab152cc9  ./docs/SECURITY_EVIDENCE.md
+091d40da988d61e0f2f13fa022363a2113aea626a45785ddd348eca2817be56c  ./docs/SECURITY_EVIDENCE.md
 d969c7b5486ee93e54232fd69d9db06f3b4dc1bba63001596ec48545073c2680  ./docs/THREAT_MODEL.md
 738258ba8f7e5ffea67d3f00eb70839590171971a9946a55b013ca95baf7aafb  ./docs/V1_RELEASE_PLAN.md
 f27c46ca63707bb8cc570eab1ea521824e94bc59b1d153998a5e91c2c7340d16  ./go.mod

docs/SECURITY_EVIDENCE.md

@@ -26,6 +26,40 @@ account names, private paths, private repository identities, and private commit
 mappings are intentionally absent from this public ledger. Native macOS
 execution remains pending and is provisional for the beta.
 
+## Beta 2 compiler publication addendum
+
+This addendum records the additive language-server release without replacing
+the Beta 1 assessment identity above. Compiler tag `v1.0.0-beta.2` is a signed
+annotated tag whose peeled public commit is
+`1082d9d61eb84e67ca4012ff9ee3898ee37ac6fd` and whose public tree is
+`01d5702928f3d9c9fb0e3d2213530add7ff94745`. The tag object is
+`f091cd67f688ba5ee784b18f5a407a9326df7ab2`.
+
+Beta 2 changed only the development compiler. No `sando/v1.0.0-beta.2` tag was
+created. The release preflight compared the retained runtime tag
+`sando/v1.0.0-beta.1` with the Beta 2 commit and verified that their `sando`
+subtrees were byte-identical at tree
+`3035e948f77f160d399089be3ae80c88bab3fed2`.
+
+The exact public Beta 2 source passed the full race-enabled verifier and the
+compiler-only release preflight on executed Linux with Go 1.26.5. Fresh native
+Windows checkouts on NTFS passed the full race-enabled PowerShell verifier,
+focused process-tree/watcher/consumer tests, candidate-stamped version checks,
+and deterministic generation on Go 1.25.12 and Go 1.26.5. Clean isolated
+`GOPROXY=direct` and public-proxy-only installs produced
+`features:["lsp-stdio"]`; the public-proxy path also verified the retained
+runtime through `sum.golang.org`. Native macOS execution remains provisional.
+
+The Beta 2 language server is additive development tooling. Its tested
+security boundary includes protocol-only stdout; bounded header and message
+framing; integer/string JSON-RPC identifiers; full-document in-memory overlays;
+UTF-16 conversion at the protocol boundary; cancellation and shutdown;
+workspace, nested-module, VCS, symlink, and file-count boundaries; and explicit
+no-write/no-network/no-Go-tool execution tests. Fuzz targets exercise bounded
+JSON-RPC framing and document changes. These checks do not make an untrusted
+workspace safe to execute: `himesan dev` and project commands remain trusted
+local-code operations, while `himesan lsp --stdio` performs analysis only.
+
 ## Observed security self-assessment evidence
 
 These commands were observed on clean remediated source during the dated