Complete governed reporting execution and publication

README.md

@@ -16,15 +16,18 @@ The module now provides an executable governed semantic-reporting vertical:
   grants, row-policy handoff, freshness checks, and reconstructable run
   provenance;
 - safe dimensions, hierarchies, measures, typed calculations, filters,
-  detail/summary/pivot queries, and accessible chart models without executing
-  arbitrary report SQL;
+  detail/summary/pivot queries, parameterized PostgreSQL semantic plans, and
+  accessible chart models without executing arbitrary report SQL;
 - quality gates, saved views, interval/scheduled runs, CSV/JSON export,
   provider-neutral publication targets, and import activation assessments;
 - a versioned, provider-neutral cross-module report contract with source-owned
   authorization, declared result schemas, privacy transforms, effective scope,
   source revisions, purpose, retention, export history, and audit provenance;
 - a full-height Reporting workspace for running, inspecting, saving,
-  scheduling, visualizing, and exporting authorized reports.
+  scheduling, visualizing, drilling into reauthorized contributors, publishing
+  through Files/Mail, and exporting authorized reports;
+- a configurable Dashboard widget and explicit policy explanations for hidden
+  fields, rows, and actions.
 
 Reporting consumes Dataflow outputs or provider-owned read models. It does not
 read another module's ORM tables or take ownership of ingestion and