Preserve inspection redaction for resource lists

docs/roadmap/implementation.md

@@ -359,6 +359,14 @@ Validation: converted inspection/diff tests find the expected values/origins and
 do not disclose synthetic credentials. Relax only assertions tied to deliberate
 upstream history/diagnostic changes, not meaningful redaction expectations.
 
+Completion: sensitivity matching and inspection paths now recognize resource
+list indexes. Public inspection and diff fixtures use identified lists and
+ConfigKit's atomic sequence comparison, including replaced and inherited
+sensitive values, metadata, failure diagnostics, and detached reports. Validation
+passed: `go test . -run '^TestConfigurationInspection' -count=1` with Go 1.27.0,
+formatting, and `git diff --check`. Internal package tests remain deferred until
+the remaining map-indexed loader fixtures are converted.
+
 ## Stage 8: Convert Public Source Builders To Explicit-ID Slices
 
 Scope: `profiles.go`, `backends.go`, source-builder GoDoc, and owning construction