feat(runtime): enforce governed mutation boundaries

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06ba0-10aa-7ea0-b20a-4f3fac39efe9

docs/architecture.md

@@ -37,8 +37,8 @@
 | Task intake | `intake.py` + `taskspec.py` | issue-core GET/PATCH poll+claim; JSON task-file for local dev | NATS when activity-core migrates |
 | Persona | `persona.py` | `kaizen-agentic schedule prepare` (ADR-005) | unchanged, plus phase-memory profile hook |
 | Session | `adapter.py` | `AgenticClaudeCodeAdapter` (cwd-pinned, profile allow-list) | + hosted adapters |
-| Orchestration | `runner.py` | profile/budget → session → commit → metrics → hub | activity-core intake |
-| Metrics | `metrics.py` | ADR-004 `.kaizen/metrics` write per run | correlate with Helix fleet metrics |
+| Orchestration | `runner.py` | profile/budget → transaction → session → grant acceptance → metrics → hub | activity-core intake |
+| Metrics | `metrics.py` | compatibility `.kaizen/metrics`; durable external ledger for granted runs | kaizen-owned projection |
 | Mail lane | `mailscan.py` | deterministic credentialed pre-step outside the session | pattern generalizes to other credentialed pre-steps |
 | Hub reporting | `hub.py` | REST progress event + task close + token event | unchanged |
 
@@ -71,7 +71,7 @@ non-interactive AppRole. See binky-control
 - **Regulation:** manifest declares, harness enforces. flex-auth gates
   apply at credential acquisition; ops-warden catalogs every lane; each
   instance runs under a named hub identity (`agt-…`).
-- **Evolution:** the harness emits `.kaizen/metrics` per run so the
+- **Evolution:** the harness emits kaizen-compatible metrics per run so the
   kaizen optimization loop covers both blueprints and the harness itself.
   Harness releases are versioned; instances pin majors; blueprint
   conformance tests run before rollout.