docs(plans): drop "What was checked" and "Needs" from the walkthroughs

Each walkthrough repeated rows of the index's "What was checked" table,
and nothing kept the copies in step with it. The opening line of each
page still links the index, which holds the one table.

A "Needs" line mostly pointed back at the section before it, which the
order of the page already shows. Also stop saying "carries" in prose.

Claude-Session: https://claude.ai/code/session_016Usf7cQGY6ULWGyZ4NHQEB

Author: auxesis

docs/plans/2026-10-04-plan-builder/accounts/README.md

@@ -19,7 +19,6 @@ It shows what `stashgen` is planned to write.
 
 - **Purpose:** Understand how one tag covers an embedded struct from another package.
 - **Related:** [The plan's embedded struct design](../../2026-10-04-plan-builder.md#embedded-structs-unexported-fields-and-other-tags), [the plan's printing design](../../2026-10-04-plan-builder.md#printing)
-- **Needs:** Nothing
 
 The `stash:",passthrough"` tag stores every `gorm.Model` field as a passthrough field.
 `Email` becomes one Encrypt Query Language (EQL) column with the `TextEq` type.
@@ -64,7 +63,6 @@ The `token` field uses `stash:"-"`, so it is an omitted field and produces no wa
 
 - **Purpose:** Follow copied tags and fields that are not stored into the generated file.
 - **Related:** [The plan's generated file design](../../2026-10-04-plan-builder.md#what-stashgen-writes), [the plan's embedded struct design](../../2026-10-04-plan-builder.md#embedded-structs-unexported-fields-and-other-tags)
-- **Needs:** Understand the account tags.
 
 The generated comment names `cache`, and `EncryptedAccount` embeds the same `gorm.Model`.
 The encrypted `Email` field retains its GORM and JSON tags.
@@ -105,7 +103,6 @@ var codec = gensupport.New(gensupport.Generated[Account, EncryptedAccount]{
 
 - **Purpose:** See what the `-redact` flag adds to `Account`.
 - **Related:** [The plan's printing design](../../2026-10-04-plan-builder.md#printing)
-- **Needs:** Understand that the tagged struct contains plaintext values.
 
 `-redact` asks `stashgen` to add `String` and `LogValue` methods to `Account`.
 These methods show `gorm.Model` and hide `Email`.
@@ -127,7 +124,6 @@ func (a Account) LogValue() slog.Value {
 
 - **Purpose:** Follow a slice through encryption and into GORM.
 - **Related:** [The plan's database design](../../2026-10-04-plan-builder.md#databases)
-- **Needs:** Understand `EncryptedAccount`.
 
 `EncryptedAccount.TableName` maps the encrypted type to the `accounts` table.
 `Create` encrypts the whole slice before GORM receives it.
@@ -145,32 +141,3 @@ func Create(ctx context.Context, db *gorm.DB, cipher *encrypt.Cipher, accounts [
 	return db.WithContext(ctx).Create(&encrypted).Error
 }
 ```
-
-## What was checked
-
-- **Every Go file type-checks:**
-  Run.
-  `go vet ./...` passes against a stub of the SDK.
-  The stub is not in this repository, and it has signatures only.
-- **A change to a tagged struct, a model or a type in another package stops the build:**
-  Run.
-  Each change fails `go build` with "cannot convert".
-- **A generated file from another version does not compile:**
-  Run.
-  A file that names an unknown version constant fails `go build`.
-- **The files `stashgen` writes:**
-  Not run.
-  `stashgen` does not exist, and the five `_stash.go` files are written by hand.
-- **The SDK can be built with these signatures:**
-  Not run.
-- **The guest returns an EQL value for a field with `encrypt_into`:**
-  Not run.
-  The target form and the dispatch do not exist.
-- **`stashgen` checks a declaration with the embedded guest:**
-  Not run.
-- **The code works with a database, GORM or pgx:**
-  Not run.
-  Nothing here has connected to a database.
-- **The EQL types, and the value the guest returns for them:**
-  Not run.
-  `eql-codegen` does not write Go yet, and the examples use a stub of `eql.TextEq`.

docs/plans/2026-10-04-plan-builder/cmd/genencrypt/README.md

@@ -14,7 +14,6 @@ The [Go example index](../../README.md) lists every example and what was checked
 
 - **Purpose:** Follow the three inputs to the planned library generator.
 - **Related:** [The plan's policy declarations](../../../2026-10-04-plan-builder.md#declarations-from-a-policy), [the rules walkthrough](../../rules/README.md), [the individuals walkthrough](../../individuals/README.md)
-- **Needs:** Read the `rules.Individuals` policy first.
 
 `protosource.New()` supplies protobuf descriptors and field options.
 `rules.Individuals` supplies the field decisions.
@@ -40,29 +39,8 @@ The `stashgen`, `protosource`, and policy packages do not exist yet.
 
 - **Purpose:** See how reviewers inspect policy changes without running rules in the application.
 - **Related:** [The generated individuals walkthrough](../../individuals/README.md), [the rules walkthrough](../../rules/README.md)
-- **Needs:** Understand the generator inputs.
 
 The [`rules` package](../../rules/README.md) runs this command through `go generate`.
 The application calls the resulting `individuals.Encrypt` and `individuals.Decrypt` functions.
 A rule change changes `individual_stash.go`, which gives a reviewer a concrete generated diff.
 The application never runs the rules.
-
-## What was checked
-
-- **Every Go file type-checks:**
-  Run.
-  `go vet ./...` passes against a stub of the SDK.
-  The stub is not in this repository, and it has signatures only.
-- **The policy example compiles against real protobuf code:**
-  Run.
-  buf v1.50.0 and `protoc-gen-go` wrote `internal/pb/`, and `go vet` passes.
-- **The protobuf source reads the field options, and the rules run:**
-  Not run.
-  Neither the source nor the generator exists.
-- **The files `stashgen` writes:**
-  Not run.
-  `stashgen` does not exist, and the five `_stash.go` files are written by hand.
-- **The SDK can be built with these signatures:**
-  Not run.
-- **`stashgen` checks a declaration with the embedded guest:**
-  Not run.

docs/plans/2026-10-04-plan-builder/contacts/README.md

@@ -21,7 +21,6 @@ It shows what `stashgen` is planned to write.
 
 - **Purpose:** Connect a tag declaration in your own package to `crm.Contact`.
 - **Related:** [The `crm.Contact` type in another package](../crm/README.md), [the plan's design for types in another package](../../2026-10-04-plan-builder.md#types-in-another-package)
-- **Needs:** Understand that the program does not own `crm.Contact`.
 
 The `-for crm.Contact` flag makes `contactStash` declare tags for a type in another package.
 The generator is planned to match fields by name and type.
@@ -72,7 +71,6 @@ type contactShape struct {
 
 - **Purpose:** See how each encrypted field holds a ciphertext and its declared search terms.
 - **Related:** [The plan's column layouts](../../2026-10-04-plan-builder.md#columns), [the plan's generated file design](../../2026-10-04-plan-builder.md#what-stashgen-writes)
-- **Needs:** Understand the `contactStash` tags.
 
 `EncryptedContact` nests one encrypted type for each encrypted field.
 
@@ -127,7 +125,6 @@ It cannot add methods to `crm.Contact` because Go requires methods to belong to
 
 - **Purpose:** Flatten nested encrypted outputs into one field for each database column.
 - **Related:** [The plan's model design](../../2026-10-04-plan-builder.md#models)
-- **Needs:** Understand the separate encrypted outputs.
 
 `-model Rows=ContactRow` asks for `EncryptRows` and `DecryptRows`.
 `ContactRow` is a model with one tagged field for each column.
@@ -183,7 +180,6 @@ func DecryptRows(ctx context.Context, d encrypt.Decrypter, rows []ContactRow) ([
 
 - **Purpose:** Compare direct column writes with a model-based GORM write.
 - **Related:** [The plan's database design](../../2026-10-04-plan-builder.md#databases)
-- **Needs:** Understand both encrypted layouts.
 
 `Create` passes each nested output to `database/sql`.
 
@@ -222,7 +218,6 @@ func CreateWithGORM(ctx context.Context, db *gorm.DB, cipher *encrypt.Cipher, li
 
 - **Purpose:** Derive and use the equality search term for a separate column.
 - **Related:** [The plan's call design](../../2026-10-04-plan-builder.md#calls), [the plan's terminology](../../2026-10-04-plan-builder.md#terminology)
-- **Needs:** Understand the `phone_number_eq` column.
 
 `Fields.PhoneNumber.Equality` derives an `encrypt.EqualityTerm` search term.
 The query compares that search term with the `phone_number_eq` column.
@@ -240,26 +235,3 @@ func IDByPhone(ctx context.Context, db *sql.DB, cipher *encrypt.Cipher, phone st
 	return id, err
 }
 ```
-
-## What was checked
-
-- **Every Go file type-checks:**
-  Run.
-  `go vet ./...` passes against a stub of the SDK.
-  The stub is not in this repository, and it has signatures only.
-- **A change to a tagged struct, a model or a type in another package stops the build:**
-  Run.
-  Each change fails `go build` with "cannot convert".
-- **A generated file from another version does not compile:**
-  Run.
-  A file that names an unknown version constant fails `go build`.
-- **The files `stashgen` writes:**
-  Not run.
-  `stashgen` does not exist, and the five `_stash.go` files are written by hand.
-- **The SDK can be built with these signatures:**
-  Not run.
-- **`stashgen` checks a declaration with the embedded guest:**
-  Not run.
-- **The code works with a database, GORM or pgx:**
-  Not run.
-  Nothing here has connected to a database.

docs/plans/2026-10-04-plan-builder/crm/README.md

@@ -17,7 +17,6 @@ The [Go example index](../README.md) lists every example and what was checked.
 
 - **Purpose:** Understand why `crm.Contact` stays free of encryption tags.
 - **Related:** [The plan's design for types in another package](../../2026-10-04-plan-builder.md#types-in-another-package), [the contacts walkthrough](../contacts/README.md)
-- **Needs:** Nothing
 
 `crm.Contact` contains only the fields supplied by the stand-in package.
 
@@ -54,7 +53,6 @@ type contactStash struct {
 
 - **Purpose:** See how a change to `crm.Contact` stops the contacts package from building.
 - **Related:** [The contacts walkthrough](../contacts/README.md), [the plan's design for types in another package](../../2026-10-04-plan-builder.md#types-in-another-package)
-- **Needs:** Understand the fields of `crm.Contact`.
 
 The generated file converts `crm.Contact` to `contactShape` at compile time.
 The conversion fails when `crm.Contact` gains, loses, reorders, or retypes a field.
@@ -72,13 +70,3 @@ type contactShape struct {
 	Internal    string
 }
 ```
-
-## What was checked
-
-- **Every Go file type-checks:**
-  Run.
-  `go vet ./...` passes against a stub of the SDK.
-  The stub is not in this repository, and it has signatures only.
-- **A change to a tagged struct, a model or a type in another package stops the build:**
-  Run.
-  Each change fails `go build` with "cannot convert".

docs/plans/2026-10-04-plan-builder/documents/README.md

@@ -18,7 +18,6 @@ It shows what `stashgen` is planned to write.
 
 - **Purpose:** Understand why the document fields have no individual tags.
 - **Related:** [The plan's struct tags](../../2026-10-04-plan-builder.md#struct-tags), [the plan's column layouts](../../2026-10-04-plan-builder.md#columns)
-- **Needs:** Nothing
 
 The `opaque` option is part of the encryption context tag.
 It tells the planned generator to encrypt the complete `Document` as one value.
@@ -43,7 +42,6 @@ Nothing inside the document can be read or searched independently through this l
 
 - **Purpose:** Follow the opaque tag into the encrypted type and declaration.
 - **Related:** [The plan's generated file design](../../2026-10-04-plan-builder.md#what-stashgen-writes)
-- **Needs:** Understand the opaque tagged struct.
 
 `EncryptedDocument` has one `Sealed` ciphertext field.
 
@@ -84,7 +82,6 @@ var codec = gensupport.New(gensupport.Generated[Document, EncryptedDocument]{
 
 - **Purpose:** See why `Save` uses a cipher and `Load` uses the client.
 - **Related:** [The plan's call design](../../2026-10-04-plan-builder.md#calls), [the root example program](../main.go)
-- **Needs:** Understand `EncryptedDocument.Sealed`.
 
 `Save` encrypts one document by passing a one-element slice.
 It stores `encrypted[0].Sealed` in the `body` column.
@@ -124,26 +121,3 @@ func Load(ctx context.Context, db *sql.DB, client *encrypt.Client, id int64) (Do
 	return docs[0], nil
 }
 ```
-
-## What was checked
-
-- **Every Go file type-checks:**
-  Run.
-  `go vet ./...` passes against a stub of the SDK.
-  The stub is not in this repository, and it has signatures only.
-- **A change to a tagged struct, a model or a type in another package stops the build:**
-  Run.
-  Each change fails `go build` with "cannot convert".
-- **A generated file from another version does not compile:**
-  Run.
-  A file that names an unknown version constant fails `go build`.
-- **The files `stashgen` writes:**
-  Not run.
-  `stashgen` does not exist, and the five `_stash.go` files are written by hand.
-- **The SDK can be built with these signatures:**
-  Not run.
-- **`stashgen` checks a declaration with the embedded guest:**
-  Not run.
-- **The code works with a database, GORM or pgx:**
-  Not run.
-  Nothing here has connected to a database.

docs/plans/2026-10-04-plan-builder/individuals/README.md

@@ -19,7 +19,6 @@ It shows what `stashgen.Generate` is planned to write.
 
 - **Purpose:** Connect policy decisions to the encrypted type and declaration.
 - **Related:** [The rules walkthrough](../rules/README.md), [the plan's policy declarations](../../2026-10-04-plan-builder.md#declarations-from-a-policy)
-- **Needs:** Understand `rules.Individuals`.
 
 `Id` and `Nickname` are passthrough fields.
 `Name` has one ciphertext, while `Email` has a ciphertext and two search terms.
@@ -66,7 +65,6 @@ var declaration = gensupport.Declare("individuals").
 
 - **Purpose:** Understand why protobuf messages do not use the usual shape check.
 - **Related:** [The generated protobuf walkthrough](../internal/pb/README.md), [the plan's design for types in another package](../../2026-10-04-plan-builder.md#types-in-another-package)
-- **Needs:** Know that `pb.Individual` contains unexported protobuf fields.
 
 The codec takes `*pb.Individual` values.
 It reads each field through a generated getter because direct struct conversion cannot include unexported fields.
@@ -102,7 +100,6 @@ CI runs `go generate ./...` and fails when a generated file differs from the com
 
 - **Purpose:** Follow protobuf pointers and the Medicare field through the generated API.
 - **Related:** [The plan's call design](../../2026-10-04-plan-builder.md#calls), [the generation command walkthrough](../cmd/genencrypt/README.md)
-- **Needs:** Understand the codec's pointer type.
 
 `Encrypt` accepts a slice of `*pb.Individual` pointers.
 `Decrypt` returns the same pointer form.
@@ -156,7 +153,6 @@ func (f MedicareNoField) Query(ctx context.Context, c *encrypt.Cipher, v string)
 
 - **Purpose:** Map each storage layout to its database columns and query.
 - **Related:** [The plan's database design](../../2026-10-04-plan-builder.md#databases)
-- **Needs:** Understand the mixed encrypted type.
 
 `Create` passes the passthrough fields, ciphertexts, search terms, and EQL value to their columns.
 
@@ -191,40 +187,3 @@ func IDByMedicare(ctx context.Context, db *sql.DB, cipher *encrypt.Cipher, medic
 	return id, err
 }
 ```
-
-## What was checked
-
-- **Every Go file type-checks:**
-  Run.
-  `go vet ./...` passes against a stub of the SDK.
-  The stub is not in this repository, and it has signatures only.
-- **The policy example compiles against real protobuf code:**
-  Run.
-  buf v1.50.0 and `protoc-gen-go` wrote `internal/pb/`, and `go vet` passes.
-- **A field added to the protobuf message does not stop the build:**
-  Run.
-  It builds, as the plan says: CI finds that change.
-- **A struct from another package with an unexported field cannot convert:**
-  Run, with `sync.Once`.
-- **A generated file from another version does not compile:**
-  Run.
-  A file that names an unknown version constant fails `go build`.
-- **The protobuf source reads the field options, and the rules run:**
-  Not run.
-  Neither the source nor the generator exists.
-- **The files `stashgen` writes:**
-  Not run.
-  `stashgen` does not exist, and the five `_stash.go` files are written by hand.
-- **The SDK can be built with these signatures:**
-  Not run.
-- **The guest returns an EQL value for a field with `encrypt_into`:**
-  Not run.
-  The target form and the dispatch do not exist.
-- **`stashgen` checks a declaration with the embedded guest:**
-  Not run.
-- **The code works with a database, GORM or pgx:**
-  Not run.
-  Nothing here has connected to a database.
-- **The EQL types, and the value the guest returns for them:**
-  Not run.
-  `eql-codegen` does not write Go yet, and the examples use a stub of `eql.TextEq`.

docs/plans/2026-10-04-plan-builder/internal/pb/README.md

@@ -16,7 +16,6 @@ The [Go example index](../../README.md) lists every example and what was checked
 
 - **Purpose:** Identify the generators, versions, and the command that generates the package again.
 - **Related:** [The protobuf source walkthrough](../../proto/README.md)
-- **Needs:** Install buf and `protoc-gen-go`.
 
 buf v1.50.0 ran `protoc-gen-go` v1.26.0 to write these files.
 The generated header reports the `protoc` version as unknown.
@@ -42,7 +41,6 @@ package pb
 
 - **Purpose:** Identify the generated values that the individuals example reads.
 - **Related:** [The generated individuals walkthrough](../../individuals/README.md), [the plan's design for types in another package](../../../2026-10-04-plan-builder.md#types-in-another-package)
-- **Needs:** Understand the `Individual` message fields.
 
 `pb.Individual` includes three unexported protobuf fields before its exported data fields.
 
@@ -89,7 +87,6 @@ The examples do not use protobuf internals such as `file_individual_proto_rawDes
 
 - **Purpose:** Connect the protobuf option to the planned policy source.
 - **Related:** [The rules walkthrough](../../rules/README.md), [the plan's policy declarations](../../../2026-10-04-plan-builder.md#declarations-from-a-policy)
-- **Needs:** Understand the `data_categories` option.
 
 `classification.pb.go` exports `E_DataCategories` for the repeated field option.
 
@@ -106,21 +103,3 @@ var (
 ```
 
 The planned `protosource` package reads this option through protobuf descriptors.
-
-## What was checked
-
-- **Every Go file type-checks:**
-  Run.
-  `go vet ./...` passes against a stub of the SDK.
-  The stub is not in this repository, and it has signatures only.
-- **The policy example compiles against real protobuf code:**
-  Run.
-  buf v1.50.0 and `protoc-gen-go` wrote `internal/pb/`, and `go vet` passes.
-- **A field added to the protobuf message does not stop the build:**
-  Run.
-  It builds, as the plan says: CI finds that change.
-- **A struct from another package with an unexported field cannot convert:**
-  Run, with `sync.Once`.
-- **The protobuf source reads the field options, and the rules run:**
-  Not run.
-  Neither the source nor the generator exists.