Self-review checks approved plan coverage

We report missing promised behavior with repository evidence and keep post-deployment promises marked unverifiable until observed. Authorized scope changes can withdraw criteria; saved plan text without approval proof gets an explicit skip. Small follow-ups use a bounded acceptance pass, and public reviews withhold confidential details. This adds review coverage, not mandatory planning or another readiness or merge gate.