docs(memory): weld verification + research export index

Saga weld checklist; README indexes local-only EXA exports (not committed
due to hygiene). Pairs with orama 2026-08-02-pr-body-grant-hmac-mvp.

Author: diazMelgarejo

.agent/memory/working/PR_BODY_GRANT_HMAC_MVP_SAGA_2026-08-02.md

@@ -41,7 +41,8 @@ stay in v2.1 **security-sentinel** orbit (do not half-implement passkeys in shel
 | `/autoplan` eng review | HMAC must bind **content digest**; nonces need atomic consume; append must verify independently |
 
 **Rerun research:** `workflow: firecrawl-deep-research`, topic: PR-body operator grant HMAC,
-depth: thorough. Primary file: research doc above.
+depth: thorough. Primary file: research doc above. Raw EXA JSON exports:
+`.agent/references/pr-body-grant-research-raw-2026-08-02/` (welded from `orama-pr255` worktree).
 
 ## Architecture (MVP vs v2.1)
 
@@ -156,6 +157,14 @@ did not spell out. Treat DONE_WITH_CONCERNS as a implementation checklist, not a
 Pairing orama + PT on the **same branch name** (`2026-08-02-pr-body-grant-hmac-mvp`) reduced
 drift. PT PR #320 is the integration surface; orama is canonical for scripts.
 
+## Weld verification (2026-08-02)
+
+- orama branch: 6 commits on post-#255 `main`; no history reset.
+- PT branch: **ancestor** of `origin/cursor/coderabbit-review-wave-sync-f559` preserved; +2 commits (sync + memory).
+- Grant stack: **12 files byte-identical** orama ↔ PT (grant lib, hooks, sync script, pre-push, tests).
+- Tests: 17 passed orama; 13 passed PT (grant + guard + worktree).
+- Plan doc: autoplan body retained; header/status updated to implemented; commit map added.
+
 ## Related memory on this branch
 
 - `CODERABBIT_REVIEW_WAVE_4835024659_4835288649_2026-08-01.md` (Batch F added)

.agent/references/pr-body-grant-research-raw-2026-08-02/README.md

@@ -0,0 +1,17 @@
+# Raw research exports — PR-body grant security (2026-08-02)
+
+Preserved from parallel agent worktree `orama-pr255` during weld (not overwritten).
+
+| Artifact | Location | In git? |
+| -------- | -------- | ------- |
+| EXA search JSON (6 queries) | Local only: `orama-pr255/.research/exa/*.json` | No — scraped payloads contain email literals blocked by repo hygiene |
+| Autoplan CEO notes | Local only: `orama-pr255/.research/autoplan-ceo-voice.md` | No — kept local alongside EXA exports |
+| Canonical synthesis | `orama-system/bin/orama-system/references/pr-body-human-grant-security-gap-research.md` | Yes (orama branch) |
+
+**Implementation saga:** `.agent/memory/working/PR_BODY_GRANT_HMAC_MVP_SAGA_2026-08-02.md`
+
+To reproduce EXA exports on a trusted machine:
+
+```bash
+# From orama-system skills / exa tooling — see research doc § Collection
+```