Record overlap-then-drop bearer revocation for T09 and T11

T1 accepted 202 then 401 after drop; production T0 still 202 for
approval-engine and informed-decision. No live factory token replaced.

Assistant: grok
Assistant-Session: 01a0a182-bab7-7f11-b32b-d06f3af52082

docs/evidence/2026-09-15-sender-bearer-revocation.json

@@ -0,0 +1,19 @@
+{
+  "step": "done",
+  "observed_at": "2026-09-15T20:30:46+00:00",
+  "credential_values_emitted": false,
+  "production_tokens_replaced": false,
+  "overlap_t1": {
+    "approval-engine": 202,
+    "informed-decision": 202
+  },
+  "revoked_t1": {
+    "approval-engine": 401,
+    "informed-decision": 401
+  },
+  "incumbent_t0": {
+    "approval-engine": 202,
+    "informed-decision": 202
+  },
+  "registry_version": 11
+}