expectation/waiver policy layer

workplans/GUIDE-BOARD-WP-0001-bootstrapping.md

@@ -165,6 +165,8 @@ Acceptance:
   and procedural evidence collectors.
 - Schemas include source URL, source version, harness version, license/access
   posture, and certification boundary fields.
+- Expectation and waiver set schemas support explicit policy application after
+  findings are generated.
 
 ## D1.6 - Local CLI Baseline
 
@@ -186,6 +188,8 @@ Acceptance:
   an assessment package, and a Markdown report.
 - The assessment package includes a fingerprinted artifact manifest for
   runner-emitted raw artifacts.
+- The baseline executor applies expectation and waiver policy refs from
+  assessment profiles and reports policy summary counts.
 
 ## D1.7 - Extension SDK Skeleton