Preserve exact evidence bytes in private publication records

docs/roadmap/remediation.md

@@ -384,6 +384,13 @@ documentation.
 
 ## R10: Preserve endpoint bytes across the private-record handoff — P2
 
+**Completed:** Private records retain ordinary version-1 JSON and select a
+version-2 base64 byte representation for non-UTF-8 fields. Both versions load;
+unknown fields remain ignorable and malformed known byte fields report format
+errors. Round-trip tests passed for all evidence fields, and real Git
+observations distinguish the original byte path from a replacement-character
+decoy consistently before and after loading. The record-format guide is updated.
+
 **Relevant code:** `internal/publish/record.go:77` and its evidence decoding;
 the string fields in `internal/publish/reconcile.go`'s `Evidence`; the existing
 Git endpoint resolution/query path in `internal/git/remote.go` and `tag.go`.