Document published account-mail preview and delivery limits

README.md

@@ -17,7 +17,7 @@ router, handlers, HTML, authorization decisions, cache behavior, and
 deployment. Adopt one boundary at a time; Go compiles and links only the
 packages you import.
 
-> **Public preview:** `v0.1.0-preview.27`. APIs may change before a stable
+> **Public preview:** `v0.1.0-preview.28`. APIs may change before a stable
 > release. Linux is the maintained release platform.
 
 ## Why Web Foundations?
@@ -60,14 +60,14 @@ owns—and, just as importantly, what remains application policy.
 Pin the preview in an application module:
 
 ```bash
-go get gamertan.com/web@v0.1.0-preview.27
+go get gamertan.com/web@v0.1.0-preview.28
 go mod verify
 ```
 
 An application may name the first package it intends to adopt:
 
 ```bash
-go get gamertan.com/web/requestmeta@v0.1.0-preview.27
+go get gamertan.com/web/requestmeta@v0.1.0-preview.28
 ```
 
 The version belongs to the `gamertan.com/web` module. See the

authmail/README.md

@@ -79,5 +79,8 @@ Local tests cover both confirmation orders, replay/expiry, generic reset request
 credential/session races, competing resets, address conflicts, stable ownership,
 retained factors, invitation handling, rate limits, restart and transactional
 migration/audit/outbox rollback. The account packages and mail/outbox suites pass;
-focused races and vet pass. Consumer HTTP/UI integration, release/publication and
-controlled real-mail proof remain pending in the repository queue.
+focused races and vet pass. The preview28 consumer dogfood also covers native
+HTTP/UI integration and real BHS inbox verification/reset/both-mailbox flows.
+Each application must still verify its own sender configuration, recipient
+delivery and recovery operations; local provider proof is not an assurance of
+external spam placement or mail reputation.

docs/GETTING_STARTED.md

@@ -26,7 +26,7 @@ The packages are ordinary Go imports. Pin the current preview and verify its
 module checksum:
 
 ```bash
-go get gamertan.com/web/requestmeta@v0.1.0-preview.27
+go get gamertan.com/web/requestmeta@v0.1.0-preview.28
 go mod verify
 ```