Preserve explicit code candidates and expose verified model asset milestones

docs/SPEECH-ALIGNMENT.md

@@ -6,8 +6,9 @@ Google EmbeddingGemma 2 remains the production semantic model.
 
 A bounded [CPU diagnostic harness](../tools/speech-eval/README.md) is now prepared.
 Seven structural tests passed on Windows, including actual owned subprocess
-failure, timeout, output overflow and retained diagnostics. No ASR model has been
-downloaded or run for this proof; these tests establish no speech quality.
+failure, timeout, output overflow and retained diagnostics. Both candidate models
+have now been downloaded and their exact bytes/SHA verified. Neither has been
+loaded or evaluated; these tests establish no speech quality.
 
 ## Why add a transcript lane
 
@@ -60,9 +61,13 @@ Model metadata was read from the Hugging Face blob API at repository revision
 
 Use immutable download URLs of the form
 `https://huggingface.co/ggerganov/whisper.cpp/resolve/5359861c739e955e79d9a303bcbc70fb988958b1/ggml-base.bin`.
-These are **publisher metadata**, not hashes verified from downloaded bytes yet.
-Commit a manifest only after a genuine download verifies exact size/SHA, model
-loading and provenance. Never accept upstream `for-tests-*` empty models.
+Both downloads were independently checked against these exact bytes/SHA values
+on 2026-10-13. The clean runtime checkout resolves to the pinned commit; model
+URLs, verified hashes and MIT notices are retained under ignored
+`.searchi/speech/provisioning.json`. This is provisioning evidence only: no
+runtime build, model loading or inference has yet been performed. Commit an
+accepted distribution manifest only after model loading and runtime provenance
+checks. Never accept upstream `for-tests-*` empty models.
 [Upstream model provenance](https://github.com/ggml-org/whisper.cpp/blob/master/models/README.md),
 [blob metadata](https://huggingface.co/api/models/ggerganov/whisper.cpp?blobs=true).