docs: retain successful custody and exact delivery login wait

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc

docs/credential-lane-designs/factory-audit-senders-review.md

@@ -59,7 +59,9 @@ attended retry seeded both independent version-1 credentials and advanced the
 registry with CAS 7→8, preserving existing senders and fields. Both CCRs are
 **applied**; Warden exited 0 and confirmed revocation for that session. See the
 [seed receipt](../evidence/2026-09-11-factory-audit-sender-seed.json). Delivery,
-receiver reload and producer acceptance remain distinct checks.
+receiver reload and producer acceptance remain distinct checks. The next attended
+delivery login failed before handoff (exit 5); no delivery mutation occurred.
+[Delivery return](../evidence/2026-09-11-factory-audit-delivery-login.json).
 
 ## Executable sequence
 

docs/evidence/2026-09-11-factory-audit-delivery-login.json

@@ -0,0 +1,20 @@
+{
+  "schema": "platform.factory-audit-delivery-attempt.v1",
+  "observed_at": "2026-09-11T08:06:20.638931+00:00",
+  "status": "login_failed_before_delivery_handoff",
+  "wrapper_exit": 5,
+  "delivery_receipt_created": false,
+  "delivery_command_executed": false,
+  "credential_values_emitted": false,
+  "remote_session_revocation": "unconfirmed_for_this_failed_login",
+  "permanent_custody": "preserved_version_1_registry_version_8",
+  "next_step": "Fresh attended delivery after browser/login feedback; do not seed or rotate again",
+  "validation": {
+    "delivery_contract_tests": 7,
+    "custody_tests": 18,
+    "custody_tests_using_real_local_openbao": 11
+  },
+  "platform_delivery_source": "44314cad3704bda40683383f898b55b1f41491bc",
+  "factory_attempts": 0,
+  "paid_calls": 0
+}