[R3][MED] Package READMEs teach internal/nonexistent subpaths; no gate covers package-README surface claims

[SisyphusZheng]

Source: third full-project audit (2026-07-25). Severity: MEDIUM. Category: new finding.

Evidence

• packages/app/README.md:22-25 — teaches app authors import { openElement } from '@openelement/adapter-vite/app-vite'; the surface-map (docs/current/PACKAGE_SURFACE.md:50) marks app-vite internal, "not application-authoring surface".
• packages/create/README.md:7 — references the nonexistent @openelement/app/vite (app exports only ./hono/model/spa/i18n/preact).
• packages/adapter-vite/README.md:6,22,37 — leads with app-vite and plugin (both internal). All three READMEs carry stale "v0.39 surface" banners.
• Actual product usage is the adapter-vite root (www/vite.config.ts:1, packages/create/templates/vite.config.ts:1); the root re-exports openElement (packages/adapter-vite/src/index.ts:65).
• Gate blind spot: tools/check-public-docs-integrity.ts:9-23 and tools/check-version-anchors.ts:48-52 scan only the root READMEs.

Suggested fix

Point all three READMEs at root imports and refresh the banners; mid-term, add package READMEs to a surface-claim gate (compare @openelement/* subpath references against the surface-map).

[SisyphusZheng]

Implemented in commit b530db1 on branch feature/alpha19-sweep (alpha.19 cleanup sweep, ADR-0118). Verification at the commit: full test suite 942 passed / 0 failed; fmt, lint, typecheck, docs:truth, package-surface, interface snapshot (re-recorded), graph/arch/deno-api/type-safety/text-integrity/signal-boundary/repo-hygiene/workflow/release-evidence/verify-configs/action-pins/critical-paths gates all green; examples:check green. Pending merge to dev; will close on merge.

[SisyphusZheng]

Closed by the v0.41.0-alpha.19 release. Fix merged via #507 (dev) and #508 (main); published as 0.41.0-alpha.19 (tag v0.41.0-alpha.19, npm latest=alpha=0.41.0-alpha.19, GitHub prerelease). Release evidence: docs/release/v0.41.0-alpha.19.md (status: completed, release:evidence:check green); dev and main at the same SHA (810e3ad).