feat: atomically journal and deliver authorized native operation outcomes

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929

docs/access-profile-v1.md

@@ -56,7 +56,9 @@ A host composes `create_app(access_controller=AccessController(...))` with:
   only after an operational-custody probe and explicit durable acceptance. Every allow must reach this sink before handler execution;
   a failed sink blocks reads as well as writes. Authorization receipts say
   `authorized`, not “operation completed.” Domain commit/outcome audit remains a
-  separate requirement; this source seam does not claim transactional audit.
+  separate concern. Native durable mutations now have a
+  [transaction-linked outcome outbox](operation-outcome-audit.md); compatibility
+  and external mutations remain outside that slice.
 - The root's existing immutable issuer and subject, supplied after owner resolution.
   No username, email, first-login promotion or generic role establishes root.