Release case states

Source of truth: TITIP-008.

stateDiagram-v2 [*] --> CANDIDATE: escalation eligible CANDIDATE --> SIMULATED: prototype and drills CANDIDATE --> IN_REVIEW: real path IN_REVIEW --> APPROVED: manual review IN_REVIEW --> REJECTED: manual review IN_REVIEW --> HELD: global hold or missing proof APPROVED --> DELIVERED: scoped tokens issued HELD --> IN_REVIEW: hold cleared by reviewer

Prototype implementations stop at SIMULATED. APPROVED and DELIVERED are specified so they are not invented later, and they stay unreachable until ADR-005 controls exist in the running system.