feat: reconcile sanctions screening freshness

README.md

@@ -10,7 +10,11 @@ Its runtime module ID is `risk_compliance`; the repository and Python distributi
 
 The first complete vertical is sanctions screening. Connectors acquires immutable source evidence; Risk Compliance imports and normalizes exact list versions, runs deterministic version-pinned screening, and presents potential matches to an independent reviewer. Fuzzy matching only creates review candidates and never confirms a legal match.
 
-The module includes database migrations, tenant-isolated APIs, an operational WebUI, append-only dispositions, time-bounded false-positive exceptions, and audit events. Queue and audit summaries deliberately retain only the minimum subject data needed for the workflow.
+The module includes database migrations, tenant-isolated APIs, an operational
+WebUI, append-only dispositions, time-bounded false-positive exceptions,
+freshness reconciliation, explicit consumer gates, and audit events. Queue and
+audit summaries deliberately retain only the minimum subject data needed for
+the workflow.
 
 ## Initial Ownership
 
@@ -22,6 +26,7 @@ The module includes database migrations, tenant-isolated APIs, an operational We
 - internal-control evidence
 - immutable sanctions list catalogues
 - sanctions screening and reviewer dispositions
+- stable screening evidence references and freshness gates
 
 ## Boundaries
 
@@ -59,7 +64,7 @@ Focused manifest verification:
 
 ```bash
 cd /mnt/DATA/git/govoplan-risk-compliance
-PYTHONPATH=src:/mnt/DATA/git/govoplan-core/src /mnt/DATA/git/govoplan-core/.venv/bin/python -m unittest discover -s tests
+PYTHONPATH=src:/mnt/DATA/git/govoplan-core/src /mnt/DATA/git/govoplan/.venv/bin/python -m unittest discover -s tests
 ```
 
 ## Gitea Workflow