docs(rectification): mark v4 intake cases as already seen, not sealed

Keep the four migrated cases in the queue. Record prior score exposures, distinguish migrated review from a fresh biography audit, and reject exposed or auto-attested cases from blind holdout use.

Co-authored-by: Cursor <cursoragent@cursor.com>

scripts/minute_rectification_holdout_intake.py

@@ -10,9 +10,15 @@ from pathlib import Path
 from typing import Any
 
 try:
-    from scripts.minute_rectification_holdout_validator import case_errors
+    from scripts.minute_rectification_holdout_validator import (
+        FRESH_HUMAN_REVIEW_KIND,
+        case_errors,
+    )
 except ModuleNotFoundError:  # pragma: no cover - direct script execution
-    from minute_rectification_holdout_validator import case_errors
+    from minute_rectification_holdout_validator import (
+        FRESH_HUMAN_REVIEW_KIND,
+        case_errors,
+    )
 
 INTAKE_SCHEMA_VERSION = "minute-rectification-holdout-v4-intake"
 DEFAULT_INTAKE = (
@@ -34,6 +40,13 @@ def append_case(path: Path, case: dict[str, Any]) -> dict[str, Any]:
         return {"appended": False, "errors": ["missing_case_id"]}
     if any(isinstance(existing, dict) and existing.get("case_id") == case_id for existing in cases):
         return {"appended": False, "errors": ["duplicate_case_id"]}
+    # Never auto-attest independent review. A true flag is accepted only when
+    # the caller already supplied a fresh biography-level human-review kind.
+    if (
+        case.get("independent_human_reviewed") is True
+        and case.get("human_review_kind") != FRESH_HUMAN_REVIEW_KIND
+    ):
+        return {"appended": False, "errors": ["independent_review_requires_fresh_biography_audit"]}
     errors = case_errors(case, gate, require_review_safeguards=True)
     if errors:
         return {"appended": False, "errors": errors}