merge: P6, the evidence pipeline (branch P6, checkpoint ce366408)

The last of the paused branches, from its "not for merge" checkpoint:
extraction in ledger-import (text, pages, page images; capped, caught),
journaled as attachment.text_extracted; dedup by hash with
books.find_attachment and books.consolidate_duplicates; annotations and
books.set_entry_settles; the company record categories; the two fuzz
targets; feature attachment_text. Nineteen files conflicted with the
four P4b merges, resolved as plan 8.0.2 says: P6 retakes schema 18 (it
had taken 16, which S4.3 holds; S5 holds 17); the tool table is 129 and
the destructive count 31; both sides' appends kept with their seams
restored; one B-27 paragraph naming every feature; in the old-books
fixture P6's hand-written reimbursement is entry 7 (its ids collided
with S4.3's invoice); the replay fuzzer's list gains S7's
invoice.written_off; S4.3's issued-PDF test expects the extraction
record P6 journals right after a filing.

One integration defect between S7 and P6, found by the arap property
test and fixed here: under P6's dedup, a write-off whose evidence bytes
were filed already (the same collection letter for a second write-off of
the same invoice) was refused only after its entry had been journaled,
at the final link to the invoice ("already linked"). The write-off now
resolves the dedup before anything is journaled and keeps a link the
record already has to the invoice instead of refusing it; an explicit
existing_attachment_id already on an entry is still refused (S7's
one-receipt-once rule). P6's gate never ran before the pause; it runs on
main after this merge, and its ledger-store -> ledger-import dependency
is the open review point (plan 8.0.1).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HS8WZziDnyxunC23MUxrLp

docs/parity.md

@@ -173,3 +173,20 @@ stay derived, and its evidence of worthlessness filed in the same call
 -3(a)). A same-year recovery is the reversal D-49 records, not a new
 movement; bills are never written off. No row above changed status (the
 A/R and A/P rows already say `done`), so the floor stands (10 done).
+
+## P6: the evidence pipeline (2026-10-26–27)
+
+No semantic feature of the catalog above moved, so no status changed and
+the floor stands (10 done): P6 changes how evidence is kept, not how a
+figure is computed. It adds one in-process extractor (a PDF's text and
+pages, an XLSX's cells as exact decimal strings, plain text; 25 MiB, 30
+pages, 2 MiB of text), journals each extraction as its own record (one per
+attachment, extractor and version, its text a content-addressed blob whose
+hash `books.verify` checks), holds identical bytes as one live attachment
+(linked to every subject, legacy duplicates consolidated with
+`duplicate_of`), records what a human read off a file (the closed
+annotation field list, engine receipt numbers running from the max) and
+what a payment settles (`entry.settles`, the only source of "reimbursed"),
+and gives company records four more homes (`notices`, `correspondence`,
+`plans`, `history`, D-20). Rules.md B-44 states it; `docs/testing.md`'s P6
+section lists its tests and the P12 mutation targets.