Record accepted platform tenant and notify dependency owners

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb

docs/production-dependency-handoffs.md

@@ -22,15 +22,14 @@ connectivity. Do not turn warn into enforce before caller adoption is proved.
 
 ## 1. Tenant alignment — key-cape, approval-engine, secrets-engine, flex-auth
 
-Before materializing credentials, reconcile three existing values:
-approval store `platform`, proposed client JWT `tenant:coulomb`, policy tenant
-`tenant:platform`. JWT/store comparison is exact. These may identify distinct
-layers, but an explicit owner-reviewed mapping is required; spelling similarity
-is not a valid mapping.
+Operator decision accepted 2026-09-06: use exact `tenant:platform` for the
+approval store, both proposed approval-client JWT tenant claims, and lifecycle
+CheckRequest tenant. This is the platform management and services tenant.
+See [accepted decision](platform-tenant-decision.md). No alias or implicit
+cross-tenant privilege follows from the landlord role.
 
-Return: the exact store tenant, JWT tenant, CheckRequest tenant and any permitted
-mapping, with a decision/contract reference and wrong-tenant denial evidence.
-No unilateral change to live clients or policy subjects is requested.
+Return: aligned source/deployment coordinates and wrong-tenant denial evidence.
+The decision is resolved; owner implementation and verification remain open.
 Related: KEY-WP-0013-T02, APPROVAL-WP-0002-T01, SECRETS-WP-0009-T03.
 
 ## 2. Admit service-client custody — railiance-platform with key-cape
@@ -142,8 +141,8 @@ secrets-engine, flex-auth and sand-boxer. railiance-platform has not returned
 a reply in this review. See GLAS-WP-0015 for the receipt summary.
 
 - v1 lacked tenant enforcement; v2 is now live with wrong_tenant denial.
-- Tenant values remain incompatible, with no authorized mapping. Operator
-  choice requested before changing registration/store semantics.
+- Tenant choice is now accepted as exact tenant:platform; owner alignment
+  and verification remain outstanding (see platform-tenant-decision.md).
 - Workstation caller access remains open even though FLEX-WP-0021-T05 was
   marked done; service coordinates are insufficient for the actual consumer.
 - AUDIT-WP-0009-T03 must precede T09 so load-bearing evidence is represented.