QAMap

Review PR changes with local source and test evidence, affected behavior, and suggested QA checks. QAMap makes no model calls. An agent can interpret its bounded report, but still uses model tokens; missing evidence stays explicit and tests do not run automatically.