Accept independent readback of both native factory sender probes

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc

docs/evidence/2026-09-11-factory-native-readback.json

@@ -0,0 +1,45 @@
+{
+  "schema": "hfact.native-audit-readback-return.v1",
+  "observed_at": "2026-09-11T13:11:08.775531+00:00",
+  "owner_receipt": "railiance-platform/docs/evidence/2026-09-11-factory-native-readback.json",
+  "owner_receipt_sha256": "f8fc818b23759192eb0633b28f147d4501a271f3c55499c4f44343f36844e0da",
+  "status": "native_producer_delivery_verified_pending_bearer_revocation_and_service_admission",
+  "reader": "operator",
+  "registry_version": 8,
+  "events": [
+    {
+      "event_id": "factory-audit-20260911104152-94aced-approval-engine",
+      "accepted_at": "2026-09-11T10:42:19+00:00",
+      "source": "approval-engine",
+      "tenant": "tenant:platform",
+      "synthetic": true
+    },
+    {
+      "event_id": "factory-audit-20260911104152-94aced-informed-decision",
+      "accepted_at": "2026-09-11T10:42:20+00:00",
+      "source": "informed-decision",
+      "tenant": "tenant:platform",
+      "synthetic": true
+    }
+  ],
+  "integrity": {
+    "intact": true,
+    "events": 36,
+    "head": "ec50d25a1298a83ed1b82ede473ebd792acf6e2b3e78b13d19df958717d3fb83",
+    "head_event_id": "factory-audit-20260911104152-94aced-informed-decision",
+    "head_accepted_at": "2026-09-11T10:42:20+00:00",
+    "first_break": null,
+    "attestation_match": null
+  },
+  "attended_execution": {
+    "wrapper_exit_code": 0,
+    "session_self_revocation_confirmed": true,
+    "private_helper_cleanup_confirmed": true,
+    "earlier_failed_session_revocation_resolved": false
+  },
+  "credential_values_emitted": false,
+  "audit_bearer_revocation_tested": false,
+  "producer_services_admitted": false,
+  "factory_attempts": 0,
+  "paid_model_calls": 0
+}

workplans/AUDIT-WP-0009-evidence-role-conformance.md

@@ -288,11 +288,12 @@ priority: high
 state_hub_task_id: "fd4a4ac3-e525-57c1-9179-e0fcd0226913"
 ```
 
-**Current native return, 2026-09-11 10:42 UTC:** custody/ESO delivery,
+**Current native return, 2026-09-11 13:11 UTC:** custody/ESO delivery,
 source-adapter accepted write, duplicate-after-process-restart, exact scope/read
 refusals and own reconciliation count one passed. Independent archive readback
-and audit bearer revocation remain; service/domain-transaction/human operation
+also passed at 13:11 UTC: both retained events have exact source/tenant and the
-is separate. See the retained native producer receipt and attempt history below.
+36-event chain is intact. Audit bearer revocation remains; service/domain-
+transaction/human operation is separate. See the dated readback return below.
 
 Register `approval-engine` as a distinct source under §9.4 and `AUDIT-IN-0001`:
 sender registration, the four event classes (issuance, use, supersession,
@@ -399,11 +400,12 @@ priority: high
 state_hub_task_id: "96e0cbd5-e3ce-5807-8f64-41244671327b"
 ```
 
-**Current native return, 2026-09-11 10:42 UTC:** custody/ESO delivery,
+**Current native return, 2026-09-11 13:11 UTC:** custody/ESO delivery,
 source-adapter accepted write, duplicate-after-process-restart, exact scope/read
 refusals and own reconciliation count one passed. Independent archive readback
-and audit bearer revocation remain; service/domain-transaction/human operation
+also passed at 13:11 UTC: both retained events have exact source/tenant and the
-is separate. See the retained native producer receipt and attempt history below.
+36-event chain is intact. Audit bearer revocation remains; service/domain-
+transaction/human operation is separate. See the dated readback return below.
 
 Register `informed-decision` as a distinct load-bearing source under
 `AUDIT-IN-0003`, and answer the doctrine question `GH-DEC-2026-014` put to
@@ -616,3 +618,23 @@ a copy independent of the cluster and Barman data. Record the operating owner,
 cadence and failure handling there; no Nextcloud credential belongs in the
 receiver. Until that return exists, describe an in-cluster attestation as a
 database-owner boundary only. Do not relabel the source-complete T02 as undone.
+
+
+## Independent audit readback — 2026-09-11 13:11 UTC
+
+The existing attended readback command completed with exit 0 while the user
+was present. Independent read-only identity `operator` found both retained
+`factory-audit-20260911104152-94aced` producer events with exact source and
+`tenant:platform`; receiver integrity is intact across 36 events. The wrapper
+confirmed this session's self-revocation and private-helper cleanup. Prior
+failed sessions' unconfirmed revocation remains historical unresolved evidence.
+
+This supersedes the earlier readback-login wait. No producer jobs were rerun,
+no credentials were reseeded and no event was written by the reader. The
+inherited zero registry-read count belongs to the producer phase; the attended
+reader did consume registry version 8. CCR21/22 stay applied and owner tasks
+stay progress pending formerly-valid audit-bearer revocation acceptance.
+Service/domain-transaction/human and factory runtime/spend admission remain
+separate; factory attempts and paid model calls remain zero.
+
+Receipt: [native readback](../docs/evidence/2026-09-11-factory-native-readback.json).