feat: admit and exercise KeyCape verifier custody activation

Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc

docs/evidence/2026-09-09-keycape-approval-admission.json

@@ -0,0 +1,36 @@
+{
+  "schema": "railiance.keycape-custody-user-approval.v1",
+  "recorded_at": "2026-09-08T23:05:19.886216+00:00",
+  "user_response": "I approve, go on.",
+  "approved_question": "Do you approve CCR-2026-0017 and CCR-2026-0018, as platform operator and KeyCape owner, for the verifier-side credential delivery described in the review packet?",
+  "review_packet_revision": "52b24eab9a8aff3396e71b2296d0240a44f3b0db",
+  "roles": [
+    "platform-operator",
+    "key-cape-owner"
+  ],
+  "scope": "Two verifier-side KeyCape client credential custody requests, including their governed attended provisioning and compatible rollout sequence.",
+  "client_side_read_authorized": false,
+  "factory_spending_authorized": false,
+  "requests": [
+    {
+      "id": "CCR-2026-0017",
+      "decision_id": "b533a271-b704-4c5c-98a2-9a5951aadfb6",
+      "status": "approved",
+      "decision_status": "resolved",
+      "reviewed_roles": [
+        "platform-operator",
+        "key-cape-owner"
+      ]
+    },
+    {
+      "id": "CCR-2026-0018",
+      "decision_id": "efa90517-0cae-4eb6-a68d-5b0489c84d65",
+      "status": "approved",
+      "decision_status": "resolved",
+      "reviewed_roles": [
+        "platform-operator",
+        "key-cape-owner"
+      ]
+    }
+  ]
+}