Validate complete speech decode windows and retain rejected ASR output

tools/speech-eval/README.md

@@ -26,7 +26,11 @@ does not implement overlap/dedup or production budgets. Segment JSON offsets are
 already milliseconds and get the window offset added exactly once.
 
 Each completed window writes an incomplete checkpoint; the final report marks
-complete. Errors retain bounded owned logs outside temporary scratch, which cleans
+complete evaluation, with `quality_failed` and explicit `validation_failures` for
+invalid ASR timestamps. Bounded raw ASR JSON remains in each checkpoint before
+validity is decided; invalid times are never clamped into evidence, and later
+windows continue. The final report records the executed harness SHA. Process
+errors retain bounded owned logs and exit/time diagnostics outside temporary scratch, which cleans
 decoded WAV/JSON on exit. Cancellation terminates only owned subprocess trees.
 Limits are supervisory checks, not OS resource sandbox guarantees. Recognized text
 is private local diagnostic data; never commit raw logs/transcripts by default.