RO-MITHRIL-IMPORT-01

CLOSED 2026-06-17. PHASE4-N-Y introduced the Ade-side Mithril provenance binding (CN-MITHRIL-01/DC-MITHRIL-01). Item (b) closed in PHASE4-N-Z (bootstrap_from_mithril_snapshot wired production composition, verify-before-bootstrap fail-closed, DC-MITHRIL-02 + ci_check_mithril_seed_point_independence.sh). Item (a) RECLASSIFIED (Tier-4 non-goal; documented-interface path -- see docs/active/mithril-documented-interface-runbook.md). Item (c) closed: a real, validator-green, operator-witnessed documented-interface bundle is committed at docs/evidence/mithril-documented-evidence_preprod_2026-06-17.toml (release-preprod cert f52a1d7c..., CardanoDatabase epoch 295 immutable 5829). ade_node --mode node first-run imported the real ~4 GB epoch-295 UTxO seed via the NON-DESTRUCTIVE FROZEN scratch venue (canonical .cardano-node-preprod DB untouched); verify_mithril_binding PASSED with the independently-sourced certified_point (Mithril cert/snapshot metadata) == the operator-extracted seed point (frozen node); a flipped-hash negative control failed closed with Binding(CertifiedPointMismatch), exit 41. Gated by ci/ci_check_mithril_documented_evidence.sh (vacuous-PASS when absent, strict when committed; the multi-GB UTxO seed is out-of-tree/hash-pinned like *-utxo-seed.json). SCOPE: a release/evidence invariant -- documented-interface Mithril import is validator-gated against a committed manifest with independent Mithril-metadata binding, positive first-run import, and negative-control fail-closed proof. NOT a claim of full from-genesis sync (RO-GENESIS-REPLAY-01, owed) or live track_utxo=true ledger application.