Reserve worker spend durably before governed dispatch

Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc

docs/evidence/2026-09-09-spend-admission.json

@@ -0,0 +1,100 @@
+{
+  "schema": "rein-spend-admission-evidence/v1",
+  "observed_at": "2026-09-09T14:37:52.167561+00:00",
+  "workplan": "REINAH-WP-0003",
+  "task": "REINAH-WP-0003-T05",
+  "source_base": "4ffb8acb190df235fc7d1ba20e2643e33f596286",
+  "source_files_sha256": {
+    "rein_aharness/spend_admission.py": "334a716da6a0900bca4fdb1fd0833c2446efe08ffb59ae9ee17ce85558c67b81",
+    "rein_aharness/claim_loop.py": "9fc1796d9dc822f2dd93f7c3edf4fc163bc2b0e502d4c95664db741bc9408180",
+    "rein_aharness/glas_execution.py": "4dc90e919de113f2f7469a747062a9ba58d50be33611c4ba2bad08da8fb894d8",
+    "rein_aharness/ops_run_client.py": "ac9263fcac5fa7a007819987b2af11338409811a3dba42a263e81c7efc7ac282",
+    "rein_aharness/cli.py": "032cc133e1a7edfe4f5353cee6fe1aa55499ff526f47fc8c231e711fc39da597",
+    "tests/test_spend_admission.py": "6b11b3ca782789f4f91d238b6646cde755117bed50713d63e9135a3be787e3e4",
+    "tests/test_repository_artifact_bwrap.py": "39cc3e19f46c07e4178387cdcf70c5b32c4a75e1923da75293d8028747d48453",
+    "scripts/verify-runtime-contracts.sh": "5617882d62e749a8ef698f11091fd2513f87553e739f6033b1c76f43e16bb492",
+    "scripts/verify-recovery-contracts.sh": "b1bf99e23f33a99b03b383b70c1312bb8b49f10b583f528b4b43a3347431e794",
+    "docs/spend-admission.md": "d4814f79b1cb05446fd289a1f6a1237e66321d920c86204abf3ebc908d9fc36e",
+    "docs/sandbox-artifact-return.md": "788c0d7b04f749a9aaa3f59db04887d82f5c40082b2c4e3d94ce8a1a7a8b0673",
+    "deploy/systemd/claim-loop.env.example": "6cd1e8d62c59735f6f53a126af4326dc1ec15cb3409dfbacb2fe4cd76dbb4b26",
+    "workplans/REINAH-WP-0003-governed-runtime-integrity.md": "6c8668866a7336ee4b698f15c7bf926d8c30eef51d689d496943756bb37564c8"
+  },
+  "validation": {
+    "full_suite": {
+      "passed": 330,
+      "skipped": 0,
+      "real_bwrap_enabled": true
+    },
+    "spend_and_actual_bwrap": {
+      "passed": 41
+    },
+    "runtime_contract_gate": {
+      "passed": 90
+    },
+    "recovery_contract_gate": {
+      "passed": 52
+    },
+    "gate_warning": "pytest cache could not write in restricted owner checkout; test assertions passed",
+    "overlap_note": "Targeted suites and gates overlap the full suite; counts are not additional independent executions."
+  },
+  "proof_scope": {
+    "actual_bwrap_owner_glas_worker_artifact_import": true,
+    "queue": "fixture",
+    "authoring": "deterministic fixture",
+    "accounting": "fixture",
+    "model_requests": 0,
+    "natural_factory_claims": 0,
+    "deployment_changed": false,
+    "factory_policy_provisioned": false,
+    "dispatch_enabled": false
+  },
+  "reuse_discovery": {
+    "url": "https://reuse.coulomb.social/v1/federated",
+    "composed_at": "2026-09-09T12:18:07+00:00",
+    "stale": false,
+    "capabilities": 65,
+    "sources": 61,
+    "snapshot_sha256": "340c5b89a449bb334e6a4922710046011aaa9e302a78297bd2d61f9b8db345b9",
+    "result": "No reservation capability found in hosted index; inspected llm-connect reporting/token control, Railiance Fabric models and agentic-resources session memory do not provide admission."
+  },
+  "implementation": "Private immutable-policy SQLite ledger before dispatch, conservative daily/total micro-euro reservations, full-charge success, durable unknown holds, replay denial, explicit receipt-backed reconciliation and sticky overrun freeze; existing Glas cached catalog, grants, repository transaction and close outbox reused.",
+  "remaining": [
+    "HFACT-WP-0001-T01: demonstrated provider maximum liability and conservative FX, finalized operating acceptance",
+    "REINAH-WP-0003-T05/T06 and HFACT-WP-0001-T03/T04/T05: protected installation, exact identity/credential/egress/placement and natural queue/model proof"
+  ],
+  "owner_snapshot": {
+    "observed_at": "2026-09-09T13:13:20.768438+00:00",
+    "tasks": {
+      "secrets-replay": {
+        "id": "3eb9cff8-1441-5437-9e92-a2b655c82d04",
+        "status": "wait",
+        "needs_human": false,
+        "updated_at": "2026-09-09T07:31:58.416393Z"
+      },
+      "native-delivery": {
+        "id": "f8069c8a-ad6b-5d0b-9a36-c2326699437d",
+        "status": "wait",
+        "needs_human": false,
+        "updated_at": "2026-09-09T07:31:58.646322Z"
+      },
+      "client-side": {
+        "id": "68bff751-e48b-548b-8fb4-dfb3b16210c2",
+        "status": "wait",
+        "needs_human": false,
+        "updated_at": "2026-09-09T12:41:29.448507Z"
+      },
+      "audit-custody": {
+        "id": "fd4a4ac3-e525-57c1-9179-e0fcd0226913",
+        "status": "progress",
+        "needs_human": false,
+        "updated_at": "2026-09-08T18:38:29.290026Z"
+      },
+      "approval-deployment": {
+        "id": "f0aa2e6d-19e6-5b43-886c-efa4e3de5f22",
+        "status": "wait",
+        "needs_human": false,
+        "updated_at": "2026-09-09T12:38:47.065340Z"
+      }
+    }
+  }
+}