Draft unsigned credential and decision sign-off batches.

INFD-WP-0002 T01–T02: eight one-question memos for net-kingdom-admins,
batch contract without approve-all, no live bind (T08 still open).

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267

docs/specs/CompactSignoffBatches.md

@@ -0,0 +1,52 @@
+# Compact sign-off batches
+
+Addendum to the Stage 1 specs (INFD-WP-0002-T02). Not a new product.
+Does not fork the Decision Memo schema.
+
+## What a batch is
+
+A batch is an *Umlaufmappe* **grouping** of Decision Memos that one
+admitted review group can bind in a compact sitting.
+
+- One question per memo (INTENT invariant).
+- Ordered list (`ordinal` in the batch index).
+- Per-memo bind. Progress is “how many memos in this sitting have a
+  human disposition,” not a batch-level verdict.
+- Review group: `net-kingdom-admins` (operator-admitted 2026-09-14).
+- Humans bind; agents draft. Unsigned drafts use principal
+  `pending-human-session`. Live bind substitutes the authenticated
+  key-cape subject.
+
+If Stage 1 UI cannot yet render a group, the same rules hold for a
+recorded desktop sitting: open memos in order, acknowledge required
+highlights, bind one memo at a time, keep `view_hash` per memo.
+
+## Anti-requirements
+
+- **No bundled unrelated acts.** One memo must not ask for a mint, a
+  deploy, and an ADR accept together.
+- **No “approve all”** that skips required highlights.
+- **No agent disposition.** An agent may draft, order, and record
+  evidence. It may not `accept` / `decline` / `seal`.
+- **No secret values** in packets or memos.
+- **No auto-approval** from review-group membership. Membership is
+  eligibility, not a bind.
+- This addendum does **not** complete INFD-WP-0001-T08. Live bind waits
+  on that path.
+
+## Sitting progress
+
+```text
+draft-unsigned → (T08 bind path live) → circulating → per-memo completed
+```
+
+Unfinished memos stay in the batch. A partial sitting does not finish
+INFD-WP-0002. File-level updates of owning workplans happen only after
+a human bind (T04), via repo files + `fix-consistency`, never
+`POST /workplans/`.
+
+## First sitting (unsigned)
+
+`docs/batches/2026-09-14/` — four credential/custody memos and four
+decision/assent memos. Indexes name the blocking workplan/task. Do not
+submit until a human sitting is opened under T03.