Record the recall measurement and the two subsystem contracts (V-719)

docs/evals/2026-08-15-locative-answerability-verifier.md rules the
resident model out as a recall answerability verifier. Its constrained
output was syntactically reliable and neither semantically reliable nor
isolated from instructions inside stored memory: five false accepts out of
32 held-out cases, two of them prompt injections carried in the memory
text, all five identical across three fixed-seed repeats.

design.md carries the reminder row as it now is, one-shot or recurring,
with the outbox and the cancellation invariants. routing.md carries the
new stage 0 frames and the cancellation rung. deployment.md carries the
/reminders contract. The assistant_workday scenario exercises the turn
sequence end to end.

--no-verify: master is the working branch this session by the owner's call.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

docs/evals/CLAUDE.md

@@ -79,6 +79,7 @@ A pair in `docs/routing.md` went stale unnoticed. Its source predated the
 | [Note recall evaluation](2026-07-31-recall.md) | superseded |
 | [Recall topic veto, what it costs and what it buys](2026-08-03-recall-topic-veto.md) | live |
 | [Note recall after the e5-small swap](2026-08-04-recall-e5-small.md) | live |
+| [Qwen3-1.7B is not safe as a recall-answerability verifier](2026-08-15-locative-answerability-verifier.md) | live |
 
 ## Phrasing and talk