Why: A completed run can still lack readable or fully provided source material. Evidence: Composition validation follows the backend and UI consumers. Impact: Adds optional host-owned limitations without changing candidate authority. Refs: fast-slow-u2-u3 Tasks 4 through 6