feat(citability): logischer norm_id-Join auf legal_basis (KB-v2 Zitier-Vertrag)

Wake-up #2 (Domaene 2): Zitierfaehigkeit ohne char-Level-Spans via logischem
norm_id-Join auf KB-v2-Units (bp_compliance_kb_2026_1_build). Konvention (Board
Compliance/KB-v2 2026-07-01): EU-<ACT>-Anhang<ROM> (Annex-Ebene, confirmed) /
EU-<ACT>-Art<N> + EU-<ACT>-Kapitel<ROM> (verify_pending). Namensvariante
EU-MaschVO-* (NICHT MaschinenVO). KEINE neue Klasse — norm_ids ist ein Attribut
auf legal_basis (freeze-safe).

- 65/65 legal_basis gejoint (CRA 40 + MaschVO 25), 0 unparsed; 64 Obligations
  citation_status -> norm_id_linked (BP/guidance-anchored bleiben ohne norm_id).
- 53 annex_confirmed, 12 verify_pending; distinkt 5 Annex-IDs + 19 Art/Kapitel.
- norm_id_manifest.json = KB-v2-Handoff (verify_pending Art-/Kapitel-IDs pruefen).
- Granularitaet annex-grob (Part/Punkt = KB-Enhancement TBD); Artikel-norm_ids in
  KB-v2 noch zu verifizieren.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

obligations/cra_logging.json

@@ -44,7 +44,11 @@
     {
      "source": "CRA",
      "anchor": "Annex I Part I (2)(k)",
-     "citation": "monitor relevant internal activity, including the access to or modification of data, services or functions, where applicable, through recording and monitoring"
+     "citation": "monitor relevant internal activity, including the access to or modification of data, services or functions, where applicable, through recording and monitoring",
+     "norm_ids": [
+      "EU-CRA-AnhangI"
+     ],
+     "norm_id_status": "annex_confirmed"
     }
    ],
    "guidance_basis": [
@@ -1038,7 +1042,7 @@
    "member_count": 961,
    "relationships": [],
    "citation_anchor_ids": [],
-   "citation_status": "pending_span_anchor",
+   "citation_status": "norm_id_linked",
    "review_status": "draft",
    "provenance": {
     "discovery_confidence": 0.95,
@@ -1066,7 +1070,11 @@
     {
      "source": "CRA",
      "anchor": "Annex I Part I (2)(k)",
-     "citation": "recording and monitoring access to or modification of data, services or functions"
+     "citation": "recording and monitoring access to or modification of data, services or functions",
+     "norm_ids": [
+      "EU-CRA-AnhangI"
+     ],
+     "norm_id_status": "annex_confirmed"
     }
    ],
    "guidance_basis": [
@@ -1601,7 +1609,7 @@
    "member_count": 505,
    "relationships": [],
    "citation_anchor_ids": [],
-   "citation_status": "pending_span_anchor",
+   "citation_status": "norm_id_linked",
    "review_status": "draft",
    "provenance": {
     "discovery_confidence": 0.92,
@@ -1629,7 +1637,11 @@
     {
      "source": "CRA",
      "anchor": "Annex I Part I (2)(k)",
-     "citation": "monitor relevant internal activity including access to or modification of functions"
+     "citation": "monitor relevant internal activity including access to or modification of functions",
+     "norm_ids": [
+      "EU-CRA-AnhangI"
+     ],
+     "norm_id_status": "annex_confirmed"
     }
    ],
    "guidance_basis": [
@@ -1878,7 +1890,7 @@
    "member_count": 226,
    "relationships": [],
    "citation_anchor_ids": [],
-   "citation_status": "pending_span_anchor",
+   "citation_status": "norm_id_linked",
    "review_status": "draft",
    "provenance": {
     "discovery_confidence": 0.9,
@@ -1906,7 +1918,11 @@
     {
      "source": "CRA",
      "anchor": "Annex I Part I (2)(k)",
-     "citation": "recording and monitoring ... in a secure manner"
+     "citation": "recording and monitoring ... in a secure manner",
+     "norm_ids": [
+      "EU-CRA-AnhangI"
+     ],
+     "norm_id_status": "annex_confirmed"
     }
    ],
    "guidance_basis": [
@@ -2442,7 +2458,7 @@
    "member_count": 505,
    "relationships": [],
    "citation_anchor_ids": [],
-   "citation_status": "pending_span_anchor",
+   "citation_status": "norm_id_linked",
    "review_status": "draft",
    "provenance": {
     "discovery_confidence": 0.93,
@@ -2470,7 +2486,11 @@
     {
      "source": "CRA",
      "anchor": "Annex I Part I (2)(k)",
-     "citation": "in a secure manner"
+     "citation": "in a secure manner",
+     "norm_ids": [
+      "EU-CRA-AnhangI"
+     ],
+     "norm_id_status": "annex_confirmed"
     }
    ],
    "guidance_basis": [
@@ -2550,7 +2570,7 @@
    "member_count": 59,
    "relationships": [],
    "citation_anchor_ids": [],
-   "citation_status": "pending_span_anchor",
+   "citation_status": "norm_id_linked",
    "review_status": "draft",
    "provenance": {
     "discovery_confidence": 0.88,
@@ -2942,7 +2962,11 @@
     {
      "source": "CRA",
      "anchor": "Annex I Part I (2)(k)",
-     "citation": "monitor relevant internal activity"
+     "citation": "monitor relevant internal activity",
+     "norm_ids": [
+      "EU-CRA-AnhangI"
+     ],
+     "norm_id_status": "annex_confirmed"
     }
    ],
    "guidance_basis": [
@@ -3251,7 +3275,7 @@
    "member_count": 283,
    "relationships": [],
    "citation_anchor_ids": [],
-   "citation_status": "pending_span_anchor",
+   "citation_status": "norm_id_linked",
    "review_status": "draft",
    "provenance": {
     "discovery_confidence": 0.9,
@@ -4737,5 +4761,12 @@
    ],
    "note": "M8/M5/M81 KI-/FRT- bzw. domaenenspezifische Trainings-/PIN-/Biometrie-Protokollierung (AI Act/sektorale Regulierung); M58/M59/M71/M56/M63 reine DSGVO-/datenschutzrechtliche bzw. nationale Verwaltungs-Protokollierungspflichten, nicht CRA Annex I (2)(k)"
   }
- ]
+ ],
+ "norm_id_contract": {
+  "convention": "EU-<ACT>-Anhang<ROM> (Annex-Ebene) / EU-<ACT>-Art<N> (verify) — KB-v2 bp_compliance_kb_2026_1_build",
+  "act_naming": "EU-MaschVO-* (NICHT MaschinenVO)",
+  "granularity": "annex-grob — 'Annex I Part II (1)' -> EU-CRA-AnhangI; Part/Punkt = KB-Enhancement TBD",
+  "article_status": "EU-<ACT>-Art<N> in KB-v2 noch zu verifizieren; Annex-IDs confirmed",
+  "source": "Board Compliance/KB-v2 2026-07-01"
+ }
 }