Install backup capacity guard and bind scoped continuation

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a11fd9-caf6-7a63-b578-9daaaa134ff2

deploy/backup/runtime-update-2026-10-09.json

@@ -0,0 +1,22 @@
+{
+  "schema": "email-connect.ledger-runtime-update.v1",
+  "date": "2026-10-09",
+  "status": "installed_verified",
+  "files": {
+    "backup-ledger.py": "e74c41948ca01dae09578e2abfba14b96fb1f158af0ec91a0fb1aa9ecaf01680",
+    "rehearse-ledger.py": "d3da88972e44dac3800afb48d21e525dc1476ca58de3e7702f7751aea33eda53"
+  },
+  "receiver_image": "forgejo.coulomb.social/coulomb/email-connect@sha256:eb3e7b68d21209e9eb71b928a5b0bc987e8e3164f21dca4ff712f946d0c103f2",
+  "receiver_pin_changed": false,
+  "timers_enabled": false,
+  "capacity": {
+    "status": "headroom_verified",
+    "local_bytes": 148994,
+    "minimum_free_bytes": 8589934592,
+    "local_budget_bytes": 8589934592
+  },
+  "private_credentials_read": false,
+  "backup_executed": false,
+  "caller_custody_decision_id": "8edbff8c-f62d-4357-8465-8eb37300f311",
+  "caller_custody_receipt_present": false
+}

docs/ledger-backup-review-2026-10-08.md

@@ -236,3 +236,14 @@ chat, argv, evidence, Git or the operations inbox.
 Full email regression: 193 passed, zero skips; focused syntax checks pass.
 Timers remain disabled. T03/T04 stay progress until durable independent custody,
 retention/schedule admission and actual recurring operation are evidenced.
+
+## Runtime guard installed — 2026-10-09
+
+User instructed continuation. Installed the reviewed capacity guard and offline
+image-binding rehearsal helper on railiance01 after comparing existing hashes
+with the first-run runtime manifest. Readback hashes match the closure contract.
+Actual pre-capture capacity check passes: retained local files 148,994 bytes,
+8 GiB minimum free space and 8 GiB local budget. No credential read or backup run.
+Receiver image/pins remain eb3e7b68 and both timers remain disabled. Receipt:
+deploy/backup/runtime-update-2026-10-09.json. Earlier preparation evidence retains
+its historical statement that node helpers had not yet changed.

workplans/EMAIL-WP-0007-ledger-backup-recovery.md

@@ -225,3 +225,14 @@ chat, argv, evidence, Git or the operations inbox.
 Full email regression: 193 passed, zero skips; focused syntax checks pass.
 Timers remain disabled. T03/T04 stay progress until durable independent custody,
 retention/schedule admission and actual recurring operation are evidenced.
+
+## Runtime guard installed — 2026-10-09
+
+User instructed continuation. Installed the reviewed capacity guard and offline
+image-binding rehearsal helper on railiance01 after comparing existing hashes
+with the first-run runtime manifest. Readback hashes match the closure contract.
+Actual pre-capture capacity check passes: retained local files 148,994 bytes,
+8 GiB minimum free space and 8 GiB local budget. No credential read or backup run.
+Receiver image/pins remain eb3e7b68 and both timers remain disabled. Receipt:
+deploy/backup/runtime-update-2026-10-09.json. Earlier preparation evidence retains
+its historical statement that node helpers had not yet changed.

workplans/EMAIL-WP-0008-scoped-transactional-callers.md

@@ -170,3 +170,13 @@ evidence: deploy/closure/evidence-2026-10-09.json. Reviewed plan SHA256: 8e529e2
 Attended caller custody, native reader proofs and coordinated scoped activation
 remain open. T03 stays progress; live receiver and caller mode are unchanged.
 Execution handoff: docs/caller-policy-draft-2026-10-08.md.
+
+## Scoped continuation authorized — 2026-10-09
+
+User instructed continuation after the activation handoff. Decision
+8edbff8c-f62d-4357-8465-8eb37300f311 binds the existing reviewed plan SHA256
+8e529e2ffdb6ee3d53a768d65b2d025b95e788734c48a29f2f8b975825dbaed7.
+OpenBao edge is initialized/unsealed. The private receipt directory exists and
+the exact silent attended command was supplied to the user. No completed login,
+credential issue or native reader proof is claimed; awaiting the actual receipt.
+Current receiver/user-engine deployments remain Ready at their baseline images.