docs: add offline evidence handoff plan

docs/go-mcp-minimal-plan.md

@@ -25,6 +25,7 @@ N0  Baseline cleanup and direction lock
   -> N9  MCP stdio smoke verification
   -> N10 Operator runbook and process scripts
   -> N11 Commit/review checkpoint
+  -> N12-pre Offline evidence intake
   -> N12 Real logged-in UIA capture gate
 ```
 
@@ -752,7 +753,84 @@ Pass if:
 - Unrelated generated files are staged.
 - Worktree contains ignored build outputs outside `runs/`.
 
-**Next node:** N12.
+**Next node:** N12-pre if the current environment cannot log in; otherwise N12 may start only when the real logged-in current-environment preconditions below are met.
+
+---
+
+## N12-pre: Offline evidence intake
+
+**Purpose:** Define and validate offline evidence copied from a separate logged-in test sandbox when the current repository environment cannot log in to iSphere.
+
+**Preconditions:**
+
+- N11 accepted.
+- Current environment cannot manually log in to iSphere / IMPlatformClient.
+- Business manager approves offline evidence intake as a pre-gate only.
+
+**Actions:**
+
+- Follow `docs/offline-evidence-intake-plan.md`.
+- Prefer mode A, **Full sandbox artifact bundle**. The user does not need to understand or generate JSON; they only copy folders from the logged-in test sandbox.
+- Recommended full-bundle shape:
+
+```text
+runs/offline-evidence-intake/<evidence-id>/
+  copy-notes.txt
+  raw/
+    install/
+    user-profile/
+    programdata/
+    shortcuts/
+    temp-importal-localcache/
+    other-candidates/
+  metadata/
+  notes/
+```
+
+- Common candidate source paths include install directories, `%APPDATA%`, `%LOCALAPPDATA%`, `%PROGRAMDATA%`, `Documents`, Desktop/Start Menu shortcuts, and `%TEMP%\importal` or `localcache` folders.
+- Pay attention to historical iSphere anchors such as `importal\localcache`, `LoginLog`, `IMPP.Util.dll`, `IMPlatformClient`, and `iSphere`.
+- Optional mode B, **Minimal redacted UIA package**, is only for advanced operators who already know how to produce JSON:
+
+```text
+runs/offline-evidence-intake/<evidence-id>/
+  manifest.json
+  scan_windows-redacted.json
+  dump_uia-main-redacted.json
+```
+
+- For optional mode B, confirm the package states `n12_status = offline_pre_only_not_n12_pass` and uses only:
+
+```text
+version
+self_check
+scan_windows
+dump_uia
+```
+
+**Expected outputs:**
+
+- Full sandbox artifact bundle for read-only offline inventory, or optional minimal UIA JSON package for advanced users.
+- No claim that the current environment has a logged-in iSphere window.
+- No claim that N12 passed.
+
+**Acceptance conditions:**
+
+Pass if:
+
+- In mode A, the copied bundle preserves directory structure and includes at least one useful `raw/` source area plus `copy-notes.txt` when available.
+- In mode A, repository-side handling is read-only inventory: do not directly run unknown binaries and do not modify original copied files.
+- In mode B, required JSON files exist and parse as JSON, and the manifest records offline pre-evidence only, not N12 pass.
+- For both modes, the route does not design or perform automatic login, send message, send file, receive file, injection, hook, memory reading, or endpoint-security bypass.
+
+**Stop conditions:**
+
+- Any step requires the user to understand JSON before they can provide the recommended full bundle.
+- Any step directly runs unknown binaries from the copied bundle.
+- Any step modifies original copied files.
+- Package is used to design automatic login, sending, file transfer, injection, hook, memory reading, or endpoint-security bypass.
+- Any reader treats the offline package as a replacement for true N12.
+
+**Next node:** N12 remains blocked until the current environment can manually log in and perform a live current-environment UIA capture.
 
 ---
 
@@ -763,7 +841,7 @@ Pass if:
 **Preconditions:**
 
 - N11 accepted.
-- User has copied real install/user files if needed.
+- Optional N12-pre offline evidence, if used, has been validated only as pre-gate context and not as N12 pass evidence.
 - User manually opens and logs in to iSphere.
 - iSphere main window is visible.
 
@@ -808,6 +886,7 @@ Pass if:
 - No candidate window appears.
 - UIA tree is empty or inaccessible.
 - Captured data contains sensitive secrets that need redaction before reporting.
+- Current environment cannot log in; in that case, use only N12-pre offline analysis and do not mark N12 passed.
 
 **Next node:** Future selector design. Do not implement selectors until N12 passes.
 
@@ -829,16 +908,16 @@ Every node must satisfy these rules:
 
 ## 4. Current Next Node
 
-Current next node is:
+Current guidance after N0-N11 completion is:
 
 ```text
-N0 -> N1 -> N2
+N12-pre if the current environment cannot log in; N12 only after current-environment manual login is possible.
 ```
 
 Immediate next action:
 
 ```text
-Run N1 C# baseline verification, then start N2 Go module skeleton.
+If login is unavailable here, collect/validate the full sandbox artifact bundle described in docs/offline-evidence-intake-plan.md. Minimal manifest/scan/dump JSON is optional and only for advanced operators.
 ```
 
-Do not start N8 or N12 early.
+Do not treat offline evidence as N12 pass. Do not start selector/action design until true N12 passes in the current environment.