fix(auth): sign served decisions before recording and returning them

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786

workplans/FLEX-WP-0024-decision-envelope-authenticity.md

@@ -4,7 +4,7 @@ type: workplan
 title: "Sign the decision envelope: the response channel is unauthenticated"
 domain: infotech
 repo: flex-auth
-status: finished
+status: active
 owner: claude
 topic_slug: netkingdom
 planning_priority: P1
@@ -15,7 +15,7 @@ related_workplans:
   - FLEX-WP-0019
   - FLEX-WP-0023
 created: "2026-09-06"
-updated: "2026-09-14"
+updated: "2026-10-16"
 state_hub_workstream_id: "90577acd-6910-548d-a13e-1dbfdfb8ed27"
 ---
 
@@ -163,3 +163,37 @@ adoption of v0.8 — the condition already exists under v0.7 and is not created
 this version. §16 already carries the same observation one layer up, about the
 standard's own publication path having no digest or freeze discipline; F1 is
 that observation applied to the artifact the standard regulates.
+
+## 5. Wire owner signing into the decision pin and retained deployment charts
+
+```task
+id: FLEX-WP-0024-T05
+status: done
+priority: high
+```
+
+2026-10-16 source follow-through: NetKingdom target Secrets Engine R2 owner review
+found that the completed T03 signature package was used only by fixtures. Add
+explicit mounted seed/kid configuration for `serve`, sign the final envelope before
+recording, and expose inert existing-Secret mounts in both retained/new charts.
+The API/sign verifier sources remain byte-identical. Local source validation and
+review are in the Custodian `docs/changes/netkingdom-target-2026-10-16/access-verifier-review/`.
+This is source preparation only, not signer admission or deployed acceptance.
+
+## 6. Admit custody, consumer trust, exact packages and native signed decisions
+
+```task
+id: FLEX-WP-0024-T06
+status: wait
+priority: high
+```
+
+Wait on Platform/OpenBao key custody, independent public-key and issuer/policy-pin
+admission, exact image and existing-Secret values rollout, owner-bound caller/tunnel,
+and Secrets Engine verifier installation. Follow `docs/decision-envelope-signature.md`
+for overlap/removal semantics. Retain signed producer record/consumer acceptance,
+forged/altered/unsigned/wrong-pin/expired denial and rotation-removal receipts;
+then update actual deployed status. No signer or runtime trust is admitted by the
+source review. This task owns the producer-side native gate; SECRETS-WP-0014 owns
+consumer admission/enforcement. The old fixture completion never established this
+gate, so the workplan is reopened rather than claiming it already passed.