docs: close out provenance timeline (#210 implemented)

docs/project-state.md

@@ -42,6 +42,7 @@ around: **Acquire, Build, Catalog, Deploy, Run**, and the cross-cutting
 | Observability: graph events for all artifacts + deletions; referrers (REFERS_TO) in queries/visualization | graph-referrers | [#199](https://github.com/toddysm/cssc-framework/issues/199), [#205](https://github.com/toddysm/cssc-framework/issues/205), [#203](https://github.com/toddysm/cssc-framework/issues/203), [#204](https://github.com/toddysm/cssc-framework/issues/204) | — | [observability/supply-chain-graph.md](https://github.com/toddysm/cssc-framework/blob/main/docs/architecture/observability/supply-chain-graph.md) | 2026-08 |
 | Observability: model multi-arch index ↔ per-architecture child manifest relationship | multiarch-index-platform | [#216](https://github.com/toddysm/cssc-framework/issues/216) | — | — | 2026-08 |
 | Observability: roll per-platform child referrers/attestations up to the index in graph queries/views (CLI `--no-rollup` + graph-service `rollup` toggle) | rollup-platform-referrers | [#217](https://github.com/toddysm/cssc-framework/issues/217) (PR [#221](https://github.com/toddysm/cssc-framework/pull/221)) | — | [observability/supply-chain-graph.md](https://github.com/toddysm/cssc-framework/blob/main/docs/architecture/observability/supply-chain-graph.md) | 2026-08 |
+| Observability: provenance timeline view (per-family, typed, dated) — `queries.provenance`, mermaid/cytoscape rendering, `cssc-graph provenance` CLI, `GET /artifacts/provenance` endpoint | provenance-timeline | [#210](https://github.com/toddysm/cssc-framework/issues/210) ([#211](https://github.com/toddysm/cssc-framework/issues/211)–[#215](https://github.com/toddysm/cssc-framework/issues/215)) | — | [querying-the-supply-chain-graph.md](https://github.com/toddysm/cssc-framework/blob/main/docs/guides/observability/querying-the-supply-chain-graph.md) | 2026-08 |
 | Catalog: promotion + quarantine cleanup includes all referrers (OCI 1.0 + 1.1) | promote-referrers | [#198](https://github.com/toddysm/cssc-framework/issues/198) | — | — | 2026-08 |
 | Early CI supply-chain tasks (Trivy scan, sign, SBOM, provenance, lifecycle, signature/vuln/lifecycle verification, Copa patching) | ci-tasks | [#2](https://github.com/toddysm/cssc-framework/issues/2)–[#14](https://github.com/toddysm/cssc-framework/issues/14), [#22](https://github.com/toddysm/cssc-framework/issues/22) | — | — | 2023 |
 
@@ -53,9 +54,6 @@ around: **Acquire, Build, Catalog, Deploy, Run**, and the cross-cutting
 
 | Capability | Feature slug | Tracking issue | PRD doc | Docs |
 | --- | --- | --- | --- | --- |
-| Observability: supply-chain graph — overall implementation epic | supply-chain-graph | [#177](https://github.com/toddysm/cssc-framework/issues/177) | — | — |
-| Observability: provenance timeline view (digest-level, dated, per-family) + sub-items | provenance-timeline | [#210](https://github.com/toddysm/cssc-framework/issues/210), [#211](https://github.com/toddysm/cssc-framework/issues/211)–[#215](https://github.com/toddysm/cssc-framework/issues/215) | — | — |
-| Observability: represent/present multi-arch (index) + per-architecture manifests in the graph (design) | multiarch-graph-present | [#218](https://github.com/toddysm/cssc-framework/issues/218) | — | — |
 | Observability: stage ImageIndexObserved events from build/app-image workflows | image-index-observed | [#220](https://github.com/toddysm/cssc-framework/issues/220) | — | — |
 | Acquire: mirror-history end-to-end validation + persist to skip re-sync | mirror-history-validation | [#157](https://github.com/toddysm/cssc-framework/issues/157), [#163](https://github.com/toddysm/cssc-framework/issues/163) | — | — |