feat: complete native execution and Steam discovery

docs/phase-2/evidence-2026-07-18.md

@@ -0,0 +1,21 @@
+# Phase 2 native vertical-slice evidence
+
+- Date: 2026-07-18
+- Requirement IDs: R-006, R-009, R-012, R-016, R-018, R-024, R-029
+- Phase/gate: phase 2 / native discovery through execution
+- Scope: bounded opt-in manifests, approved Desktop Entry parsing, normalization,
+  durable identity, search, dry-run plans, global user configuration, owned child
+  execution, bounded redacted logs, and failures
+- Exclusions: arbitrary application scanning, real graphical games, wrappers, Steam,
+  daemon or IPC, cache, installation management, and public stability
+- Commands: `cargo test --workspace --all-targets --locked`; `make check`;
+  isolated CLI list/search/info/scan/dry-run/launch integration test
+- Expected result: hostile metadata fails closed; arguments remain discrete; exact IDs
+  and unique names resolve deterministically; ambiguity is structured; child output is
+  logged privately with sensitive output and home paths redacted; unsuccessful launches
+  return structured errors; concurrent configuration edits fail closed
+- Observed result: 56 workspace tests and strict repository gates passed; the isolated
+  native process executed through the production CLI path and produced a bounded mode-0600
+  log; configuration CLI edits reached native launch-plan runtime, session, environment,
+  and provenance fields
+- Result: pass