Record cross-account document availability and pending UI review

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1abf1-7e95-7141-87c9-ee78332bf790

docs/evidence/2026-11-05-vergabe-document-return.json

@@ -0,0 +1,23 @@
+{
+  "schema": "railiance.vergabe-pilot-user-return.v1",
+  "reported_on": "2026-11-05",
+  "workplan": "RAPPS-WP-0014",
+  "task": "RAPPS-WP-0014-T03",
+  "evidence_source": "User confirmation in the active conversation",
+  "evidence_kind": "user_reported",
+  "company": "demo-company",
+  "user_return": "The file is there fine on the other account; the UI around documents still needs review.",
+  "uploaded_document_available_to_other_account": true,
+  "download_sha256_independently_verified": false,
+  "document_ui_review": {
+    "status": "pending",
+    "requested_by_user": true,
+    "owner": "vergabe-teilnahme",
+    "observed_discoverability_issue": "Upload is reached through phase 6 Unterlagen finalisieren, then Dokumente / + Hochladen"
+  },
+  "anonymous_download_denial_verified": false,
+  "populated_restart_or_recovery_verified": false,
+  "personal_account_identifiers_recorded": false,
+  "credentials_or_tokens_recorded": false,
+  "runtime_mutations_by_agent": false
+}

docs/vergabe-demo-company-acceptance.md

@@ -5,7 +5,10 @@ The user confirmed both demo-company accounts can sign in with username/password
 and OTP on 2026-11-05; see the [sign-in receipt](evidence/2026-11-05-vergabe-two-user-signin.json).
 The user also confirmed Ausschreibung/Anforderung creation and visibility from
 the other account after reload; see the [workflow return](evidence/2026-11-05-vergabe-shared-workflow.json).
-Task edits, document/local-issue workflow and recovery remain pending.
+The user confirmed the uploaded file is available from the other account; see
+the [document return](evidence/2026-11-05-vergabe-document-return.json). The
+document UI still needs user review. File hash equality and signed-out download
+refusal are unverified. Task edits, local-issue workflow and recovery remain pending.
 
 The other session does not update automatically, and a fresh login was needed
 after a short interval. The user wants a full working day without renewed login