fix(windows99): close scoped relink confirmation readback

apps/api/src/services/windows99_vmx_source_locator_readback.py

@@ -1133,6 +1133,25 @@ def build_windows99_vmx_source_locator_readback(
         target_aliases=target_aliases,
         receipt_locate_status=receipt_locate_status,
     )
+    if scoped_receipt_applies:
+        candidate_confirmation_gate = {
+            **candidate_confirmation_gate,
+            "status": "candidate_identity_confirmed_by_scoped_relink_dry_run_receipt",
+            "decision": "confirmed_for_dry_run",
+            "reason": (
+                "scoped relink dry-run receipt already passed reviewer validation "
+                "with clean no-write operation boundaries"
+            ),
+            "confirmed_candidate_count": max(
+                _int(candidate_confirmation_gate.get("confirmed_candidate_count"), 0)
+                or 0,
+                1,
+            ),
+            "identity_evidence_sufficient": True,
+            "can_prepare_scoped_relink_dry_run": True,
+            "safe_next_step": "rerun_no_secret_collector_and_scorecard_no_vm_power_change",
+            "missing_evidence": [],
+        }
 
     return {
         "schema_version": _SCHEMA_VERSION,