docs(requirements): mark EVID-02/03/04 complete (phase 16 gap)

.planning/REQUIREMENTS.md

@@ -25,16 +25,16 @@ destructive remediation gated behind explicit human approval.
 - [x] **EVID-01**: For each candidate ticket, the system extracts ticket ID/number,
   company, requester/reporter, title, description, notes, relevant time entries,
   and attachment metadata
-- [ ] **EVID-02**: When multiple `.eml` attachments exist, the system prefers
+- [x] **EVID-02**: When multiple `.eml` attachments exist, the system prefers
   `rfc.eml` as the original reported message over `OriginatingEmail.eml`
   (wrapper/context), matching case-insensitively and by `message/rfc822`
   content-type, not filename alone
-- [ ] **EVID-03**: The system parses the selected original email's RFC822/MIME
+- [x] **EVID-03**: The system parses the selected original email's RFC822/MIME
   structure into normalized headers (From, display name, sender email/domain,
   Reply-To, Return-Path, To, Cc, Subject, Date, Message-ID, Received chain,
   SPF/DKIM/DMARC authentication results), extracted URLs, and attachment
   metadata (name, content-type, size, hash)
-- [ ] **EVID-04**: The system stores a sanitized/truncated body preview alongside
+- [x] **EVID-04**: The system stores a sanitized/truncated body preview alongside
   raw evidence, and never executes or fetches any URL found in a message
 
 ### Campaign Grouping
@@ -153,9 +153,9 @@ Populated during roadmap creation.
 | DETECT-02 | Phase 15 | Complete |
 | DETECT-03 | Phase 18 | Pending |
 | EVID-01 | Phase 15 | Complete |
-| EVID-02 | Phase 16 | Pending |
-| EVID-03 | Phase 16 | Pending |
-| EVID-04 | Phase 16 | Pending |
+| EVID-02 | Phase 16 | Complete |
+| EVID-03 | Phase 16 | Complete |
+| EVID-04 | Phase 16 | Complete |
 | CAMP-01 | Phase 18 | Pending |
 | CAMP-02 | Phase 18 | Pending |
 | CAMP-03 | Phase 18 | Pending |