http service with health, extension listing, profile validation, run planning, async run jobs, job inspection, and report retrieval

workplans/GUIDE-BOARD-WP-0001-bootstrapping.md

@@ -221,7 +221,7 @@ Acceptance:
 
 ```task
 id: GUIDE-BOARD-WP-0001-T007
-status: in_progress
+status: done
 priority: high
 state_hub_task_id: "455f92b0-1d2b-43d0-aa61-464d9dc83a62"
 ```
@@ -246,6 +246,8 @@ Progress:
 - The core now supports external extension repositories via `--extension-dir`
   and `GUIDE_BOARD_EXTENSION_PATHS`; `open-cmis-tck` has been split into its own
   extension repo.
+- Split-repo guide-board CLI discovery, planning, and run smoke tests work with
+  `open-cmis-tck` as an external extension.
 
 ## D1.9 - Containerized Execution Design
 
@@ -278,7 +280,7 @@ Progress:
 
 ```task
 id: GUIDE-BOARD-WP-0001-T009
-status: todo
+status: done
 priority: medium
 state_hub_task_id: "58bd6ec6-2cf3-450f-95a7-b695aaf80609"
 ```
@@ -290,11 +292,21 @@ Acceptance:
 - Long-running jobs are tracked without blocking the API process.
 - CLI remains the source of truth for execution semantics.
 
+Progress:
+
+- Added dependency-light local HTTP service module and `guide-board serve`.
+- Added endpoints for health, extension listing, profile validation, planning,
+  asynchronous run jobs, job inspection, and report retrieval.
+- Documented service and container modes in `docs/LOCAL-SERVICE-API.md` and
+  `docs/CONTAINER.md`.
+- Added lifecycle tests that start the API, run the sample assessment as a
+  background job, and fetch generated reports.
+
 ## D1.11 - Compliance Evidence Pack Strategy
 
 ```task
 id: GUIDE-BOARD-WP-0001-T010
-status: todo
+status: done
 priority: medium
 state_hub_task_id: "2f845860-ade9-4d31-91c7-cb1c69dc4e1b"
 ```
@@ -308,6 +320,14 @@ Acceptance:
 - Provide a reviewable evidence-request and waiver model suitable for auditor
   collaboration.
 
+Progress:
+
+- Added `docs/COMPLIANCE-EVIDENCE-PACKS.md`.
+- Added `docs/schemas/evidence-request-set.schema.json`.
+- Added `extensions/_template/evidence-request-set.json`.
+- Documented evidence request sets in the extension SDK and architecture
+  blueprint.
+
 ## Definition Of Done
 
 - The repository identity is `guide-board`.