feat: complete Worldforge shadow proof

SLICE_HISTORY.md

@@ -214,3 +214,39 @@ changing the live workflow.
 ### Next gate
 
 DFG-5B: complete the full-family shadow proof when AssetForge is explicitly authorized.
+
+## DFG-5B Worldforge full-family shadow completion
+
+### Changed
+
+- Expanded the Worldforge-local adapter from the partial proof to all source families, including
+  the ten AssetForge nodes and their 25 incident edges.
+- Added a Worldforge-owned AssetForge context profile with deterministic source ordering, stable
+  node and source citations, a hard token budget, and explicit omission records.
+- Routed the shadow render comparison through the complete Worldforge builder output inventory,
+  including the combined `manual/manual.html` output.
+- Released the adapter boundary as DocForge 0.4.0. Worldforge-specific context, query, and render
+  policy remains outside the generic core.
+
+### Verification
+
+- The shadow graph matched all 532 nodes and 830 edges exactly through DocForge's standard
+  disposable index.
+- Exact lookup, five weighted searches, development and AssetForge filters, backlinks, and phase
+  and AssetForge dependency traversal matched the current Worldforge index.
+- Active, Phase 3, Phase 5, and AssetForge contexts were byte-repeatable. Active matched the current
+  cache; AssetForge included all ten nodes under the normal budget.
+- A reduced AssetForge budget retained the required root, stayed within budget, and recorded
+  omissions. An invalid budget failed before producing a context.
+- All 32 generated outputs matched committed bytes. The proof wrote only temporary derived files
+  and removed them afterward.
+
+### Limits
+
+- The adapter remains an explicit local shadow command and is not loaded by the normal MCP server.
+- Canonical application and public deployment remain outside DocForge.
+- Reuse outside Worldforge is not yet proven.
+
+### Next gate
+
+DFG-6: prove the generic core with an unrelated project and simultaneous project-isolated servers.