Audit package attribute reads and choose fact/assertion shape.

FLEX-WP-0025-T01/T02: keep merged attributes, add registry/asserted
namespaces later, and declare the remaining ceiling keys so no
published allowlist is unbacked. T03 stays waiting on validate.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267

examples/ops-warden/resource_manifest.yaml

@@ -18,6 +18,8 @@ resources:
         - platform
         - root
       max_ttl_hours: 8
+      security_zone: z2-protected
+      security_zone_admission: satisfied
   - id: ssh-cert:actor/ci-deploy-agent
     type: ssh-certificate
     labels:
@@ -35,6 +37,8 @@ resources:
         - deploy
         - git
       max_ttl_hours: 2
+      security_zone: z2-protected
+      security_zone_admission: satisfied
   - id: ssh-cert:actor/backup-automation
     type: ssh-certificate
     labels:
@@ -51,6 +55,8 @@ resources:
       allowed_principals:
         - backup
       max_ttl_hours: 1
+      security_zone: z2-protected
+      security_zone_admission: satisfied
 actions:
   - sign
 caring_profile: caring-0.4.0-rc2