docs(P04): complete regression-gate-evidence-hardening phase (v1.13.7)

---ci---
project: acdl
phase: 4
milestone: v1.14
status: complete
requirements:
  covered: [REQ-138]
  partial: []
---/ci---

.ciagent/CAPABILITY_INVENTORY.md

@@ -93,22 +93,25 @@ down to zero-cost steady state (P64, D-096).
 
 - **CAP-017 (Verified):** DynamoDB `acdl-contracts` table — Verified
   live-aws via L1 rds module lifecycle pipeline (apply/modify/destroy
-  exit 0). Evidence: regression registry CAP-017 (lifecycle-pipeline tier).
+  exit 0). Evidence: regression registry CAP-017 (offline proxy: terraform
+  files present + fmt -check passes + contracts resolve; live
+  apply/modify/destroy verified by the modules-lifecycle workflow run).
 - **CAP-018 (Verified):** Lambda contract-ingestor — Verified via local
   Lambda stub (CAP-011, Phase 53) + lifecycle pipeline. Evidence:
-  regression registry CAP-018.
+  regression registry CAP-018 (offline proxy).
 - **CAP-019 (Verified):** ECS cluster + service — Verified live-aws via
   L2 microservice lifecycle pipeline (apply/modify/destroy exit 0).
-  Evidence: regression registry CAP-019.
+  Evidence: regression registry CAP-019 (offline proxy).
 - **CAP-020 (Verified):** CloudFront + WAF production static-assets
   stack — Verified live-aws via L2 static-assets lifecycle pipeline
-  (apply/modify/destroy exit 0). Evidence: regression registry CAP-020.
+  (apply/modify/destroy exit 0). Evidence: regression registry CAP-020
+  (offline proxy).
 - **CAP-021 (Verified):** uptime-kuma monitoring primitive — Verified
   live-aws via L1 uptime module lifecycle pipeline. Evidence: regression
-  registry CAP-021.
+  registry CAP-021 (offline proxy).
 - **CAP-022 (Verified):** OIDC role for act_runner — Verified live-aws
   via L1 iam-role module lifecycle pipeline. Evidence: regression
-  registry CAP-022.
+  registry CAP-022 (offline proxy).
 
 All CAP-017..022 are now in the regression registry
 (`core/regression_verify.py`) with "lifecycle-pipeline" tier evidence