feat(sources): Wayback pass, automatic trimming, detention rule, ten cases re-sourced

Second and third rounds on the dossier pipeline, reviewed locally before commit.

Retrieval
- wayback_pass.py: retries every BLOCKED/DEAD/THIN/ERROR linked source through
  the Wayback Machine; blocks carry the snapshot date, archive URL and the live
  verdict. 143 slots retried: 93 fetched, 37 no snapshot, 12 script shells, 1 PDF.
- fetch_sources.py: fetch_wayback() helper.
- add_extra_sources.py: files staged extra_* finds (web search, not on the DB
  record) into the store with a provenance note.
- Cases re-sourced by web search: 248 (Oslo: Document.no, Avisa Oslo, NRK; the
  linked Le Parisien piece is case 242 and is marked OFF-CASE), 258 Kharkiv,
  260 Singapore, 358 Bangkok, 365 Las Vegas, 388 Verneuil-sur-Seine, 390 Zoersel,
  430 Homestead. 341 of 364 cases now hold a fetched article; 11, 66 and 399
  have no public text source (podcast, police video, direct victim report).

Trimming
- auto_trim.py: case-anchored furniture cut for UNTRIMMED blocks. Finds the body
  run that mentions the case, merges across subheadings and short furniture
  gaps, drops teasers, share bars, date/URL/caption lines and subscription
  pitches; refuses pages with no record term or almost no body. 302 blocks
  trimmed; 16 left on auto-trim-review.md (7 OFF-CASE suspects). Every cut is
  labelled AUTO-TRIMMED, UNREVIEWED in the dossier; the full extract stays in
  staging/. Decisions with anchors in trim-decisions-auto.json.
- build_cases.py / verify_all.py: banners for auto-trimmed and archived blocks,
  staged-file check extended to Wayback blocks, flag legend under the record.

Detention rule
- README "Definitions": the DB field `kidnappings` is the DETENTION violence
  type (victim, guard, staff or relative held to force submission or execute
  the theft), distinct from the Kidnapping scenario (taken away and held).
- detention-flag-review.md / detention-flag-corrections.json: 40 records
  reviewed with evidence; 30 set-to-1 proposals accepted by the owner on
  2026-09-06 (listed in corrections-approved.md), 10 still open.
- apply_detention_wording.py: "Violence Used" in the 70 reviewed summaries now
  names detention explicitly (62 of 70 labelled), supported by the summary's
  own text; idempotent; supersedes the batch scripts' wording.

Worklist and docs
- sofia-worklist.md: 248 decisions, detention rule item replacing the old
  "no abduction" item, fresh-search section for the textless cases.
- README-START-HERE.md: progress notes, run commands, next steps.
- Bug fixed in passing: Wayback blocks stored in-memory text with carriage
  returns; now stored as read back from disk.

verify_all.py PASSES (2321 checks).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GZZENdTLzNGsbNy4DyF1yt

merge-output/staging/365/03_thedefiant-io.txt

@@ -0,0 +1,33 @@
+Florida Teens Kidnap Las Vegas Man, Steal $4M in Crypto and NFTs After 70-Mile Drive to Arizona Desert | The Defiant
+
+Florida Teens Kidnap Las Vegas Man, Steal $4M in Crypto and NFTs After 70-Mile Drive to Arizona Desert
+
+Three teenagers from Florida are accused of kidnapping a man at gunpoint who had recently hosted a cryptocurrency event in downtown Las Vegas (DTLV)
+
+Three teenagers from Florida are accused of kidnapping a man at gunpoint who had recently hosted a cryptocurrency event in downtown Las Vegas (DTLV). The suspects allegedly drove the victim 70 miles to a remote desert area in Arizona, where they forced him to transfer $4 million in cryptocurrency and NFTs.
+
+The incident, which occurred last November, involved the victim being taken from Las Vegas to the Arizona desert. The stolen assets included both cryptocurrency and non-fungible tokens (NFTs).
+
+Police reports indicate that over $200,000 of the stolen funds have been frozen as part of the ongoing investigation. Two of the suspects, both 16-year-olds from Florida, face 22 felony counts related to the kidnapping and theft and have been charged as adults.
+
+This is an AI-generated article powered by DeepNewz, curated by The Defiant. For more information, including article sources, visit DeepNewz.
+
+Our articles are stored on Filecoin.
+
+Get an edge in Crypto with our free daily newsletter
+
+Know what matters in Crypto and Web3 with The Defiant Daily newsletter, Mon to Fri
+
+90k+ Defiers informed every day. Unsubscribe anytime.
+
+The AMC Fight Turned Into An Industry Argument Over Which Tokenized Stock Model Wins
+
+Robinhood Chain Gas Fees Jump 82-Fold In 11 Days To Top Every Other Chain
+
+Bitcoin Holds $77,000 After Weak Hiring Print
+
+Nomura's Laser Digital Moves Into DeFi Fixed Income
+
+Uniswap Labs Bought Pons Token for 'Long-Term Alignment'
+
+'Money Mushroom' Moved A Nasdaq Penny Stock, But Its 'Tokenized Stock' Is A Memecoin Too

merge-output/staging/365/index.json

@@ -5,11 +5,37 @@
     "field": "url",
     "url": "https://www.msn.com/en-us/news/crime/florida-teens-kidnap-las-vegas-man-drive-him-to-arizona-desert-steal-4m-in-cryptocurrency-police/ar-AA1EvkGd",
     "host": "msn.com",
-    "fetched_at": "2026-08-06T13:46:29+00:00",
+    "fetched_at": "2026-09-06T11:18:36+00:00",
     "verdict": "THIN",
     "method": "raw",
     "http": 200,
     "chars": 0,
     "note": "extractor recovered very little; needs the WebFetch path or a site-specific rule"
+  },
+  {
+    "case": 365,
+    "n": 2,
+    "field": "extra_1",
+    "url": "https://www.8newsnow.com/investigators/florida-teens-kidnap-las-vegas-man-drive-him-to-arizona-desert-steal-4m-in-cryptocurrency-police/",
+    "host": "8newsnow.com",
+    "fetched_at": "2026-09-06T11:18:36+00:00",
+    "verdict": "BLOCKED",
+    "method": "raw",
+    "http": 403,
+    "note": "raw request refused; try the WebFetch path, which is a model transcription and must be labelled as such"
+  },
+  {
+    "case": 365,
+    "n": 3,
+    "field": "extra_2",
+    "url": "https://thedefiant.io/news/hacks/florida-teens-kidnap-las-vegas-man-steal-4m-crypto-nfts-after-70-mile-drive-to-6d1e7357",
+    "host": "thedefiant.io",
+    "fetched_at": "2026-09-06T11:18:37+00:00",
+    "verdict": "FETCHED",
+    "method": "raw",
+    "http": 200,
+    "chars": 1919,
+    "sha256": "af1aa40c34a5716197f38f8180ce2efc15e0e291576d6e338e79936c22afe82a",
+    "final_url": null
   }
 ]