the third-party reference payloads are cited, not vendored

The note dumps' references/ payloads were removed and replaced by the frozen entry references-citations-2026-08-11, which pins each removed file by sha256 alongside its bibliographic entry. The repository has no redistribution rights to published papers; arXiv's default licence lets arXiv distribute and grants nothing to third parties. The bundles' conversations, notes and Lean content are untouched, and the change went through the sanctioned frozen procedure: new dated entry, superseded entries annotated, digests recomputed together.

One citation could not be verified against a publisher of record. It is flagged as unverified inside the entry rather than reconstructed from memory.