Record attended native proof preparation and remaining approval gates

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c

workplans/REINAH-WP-0003-governed-runtime-integrity.md

@@ -916,3 +916,33 @@ weekday canary results. T06 still requires the attended native requester/human
 approval and fresh spend/window described by the existing metered proposal.
 Those are existing owner gates; no new task/workplan or substitute approval
 has been created, and the workplan remains `blocked`.
+
+### Attended native review preparation — 2026-09-27
+
+The user approved the existing EUR 10 single-attempt proposal and completed the
+scoped requester authentication. Native spend request
+`e9521804-8fce-4fbc-bfdf-8a1aa959fd61` was created without human entries. Memo
+`infd-20260927-b01` is loaded at Informed Decision for the actual human reviewer;
+the exact execution window is September 27, 16:35–17:35 UTC. Do not extend it
+or treat the requested record as accepted spend authority.
+
+Deployed compact-sitting v4, admitting only that additional exact record while
+preserving existing records and MFA requirements. Seven policy tests and the
+fixture pass, including wrong-ID, wrong-digest and missing-MFA refusal. Both
+rollouts succeeded and the review service reports ready. Flex Auth commits
+`331d8c3`/`9993a7c`; Informed Decision commit `e415ec4`.
+
+The replacement spend/owner/catalog candidate passes offline review (two USD
+4.64 holds within EUR 10), and all six action bindings were obtained from the
+live named Secrets Engine policy evaluator. Evidence lives in Secrets Engine
+`docs/proposals/glas-metered-tool-20260927/` (`0b49b7e`). These are evaluator
+inputs, not human entries, consume receipts or execution authority. The temporary
+caller credential was destroyed. Host policy hashes remain unchanged and all
+three original spend-ledger tables remain empty; no ledger was reset.
+
+T05/T06 remain `wait`: human spend acceptance and billing/FX confirmation are
+pending, followed by native per-lane approval/consume/delivery, current clock
+admission and a natural queue attempt. The existing CCR-2026-0025 requester is
+scoped to three older frozen T03 requests; its owner must admit the reviewed
+six-request command before reuse. No provider credential was retrieved, paid
+run dispatched, or new task/workplan opened. T04's tenant-owner gates remain.