Keep prepared search readers warm and verify abrupt indexing recovery

docs/PERFORMANCE.md

@@ -166,3 +166,19 @@ include the active VM-contention caveat: native photo inference and other work
 may overlap. This is an absolute small-corpus comparison, not an old-baseline
 regression claim or proof of model/media tracing overhead. The extra cost
 supports keeping detailed mode optional rather than claiming it is free.
+
+## Prepared-reader publication
+
+The desktop shares a bounded process-local prepared ANN between indexing and
+its retained query service. The graph is registered before SQL activation and
+matched by canonical database, dimensions, generation, policy and checksum.
+`semantic.prepared_graph_lookup` measures that handoff; a successful handoff
+sets `semantic.ann_load` cache_hit to one, without blob read/checksum/deserialization.
+The query model and real-vector LRU remain warm. Eligibility refresh and query
+inference still have costs and are measured independently.
+
+The actual CPU regression checks both a repeated cached query and an unseen
+query after publication; the unseen input must record query_cache_hit zero.
+See [RECOVERY-AND-HANDOFF.md](RECOVERY-AND-HANDOFF.md). Its single-document
+request times do not establish representative-corpus p95, native first input
+or foreground priority during indexing. Shared CPU admission remains open.