收束promotion候选证据

结论：按text22铁律完成promotion-candidates双层证据管理，baseline保持28/28/131/0，Python remap、tool DB、external user-M hard block继续locked。

wasm-port/runtime/sdk/README.md

@@ -72,6 +72,7 @@ import {
   VIRTUAL_HAL_PROJECT_PIN_GROUPS,
   VIRTUAL_HAL_SIM_CONFIG_INVENTORY_ARTIFACT_HASHES,
   VIRTUAL_HAL_SIM_CONFIG_INVENTORY_BASELINE,
+  VIRTUAL_HAL_SIM_CONFIG_EVIDENCE_EXPANSION_CANDIDATES,
   VIRTUAL_HAL_SIM_CONFIG_SOURCE_TARGETS,
   VIRTUAL_HAL_SOURCE_DERIVED_CAPABILITIES,
   VIRTUAL_HAL_SIMULATION_REPLACEMENT_TARGETS,
@@ -96,6 +97,7 @@ import {
   createVirtualHalPinInventory,
   createVirtualHalPinRegistry,
   createVirtualHalProjectReport,
+  createVirtualHalSimConfigEvidenceExpansionReport,
   createVirtualHalSimConfigSourceCoverageReport,
   createVirtualHalSimulationReplacementReport,
   createVirtualHalSimulationRuntimeReport,
@@ -329,6 +331,13 @@ private page state.
   files, current Node `PASS` evidence, blocked-family exclusions, target
   browser diagnostics evidence, and the required virtual HAL reports for
   QtDragon on-abort, PUMA seam-weld, and rose-engine promotion planning.
+- `VIRTUAL_HAL_SIM_CONFIG_EVIDENCE_EXPANSION_CANDIDATES` and
+  `createVirtualHalSimConfigEvidenceExpansionReport()` expose the next
+  browser-diagnostics expansion candidates that already have Node `PASS`,
+  browser `REP`, and source-derived virtual HAL evidence. These rows remain
+  evidence planning artifacts only: they keep the inventory baseline unchanged
+  and do not unlock Python remap, tool DB, external user-M, upstream demo, or
+  asset-only rows.
 - `VIRTUAL_HAL_SIM_CONFIG_MACRO_LOAD_FIXTURES`,
   `VIRTUAL_HAL_SIM_CONFIG_MACRO_LOAD_BLOCKED_FIXTURES`, and
   `VIRTUAL_HAL_SIM_CONFIG_MACRO_LOAD_AUDIT_CANDIDATES` plus