Reserve worker spend durably before governed dispatch

Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc

workplans/REINAH-WP-0003-governed-runtime-integrity.md

@@ -635,6 +635,25 @@ The matching rein/Glas code must be rebuilt and admitted in the protected runtim
 this local proof does not close live G1/G2 or authorize a model request. See the
 2026-09-09 runtime-transfer evidence and the owning runtime documentation.
 
+
+### Durable spend admission — 2026-09-09
+
+The existing worker now reserves declared maximum liability in a private durable
+SQLite ledger before Glas dispatch. It pins the admitted owner/definition/target/
+project/grant and resolved profile/descriptor, counts conservative micro-euro
+charges against daily and total ceilings, refuses duplicate demand/claim attempts,
+and blocks after unknown accounting or crashes until explicit owner reconciliation.
+Close-only replay runs before admission checks; observed overruns freeze the
+envelope even after reconciliation. The trusted execution project is configurable;
+no queue reference can override it. See [operator contract](../docs/spend-admission.md)
+and [verification evidence](../docs/evidence/2026-09-09-spend-admission.json).
+
+This closes the missing local reservation/recovery implementation. T05 remains
+`progress` for accepted provider liability/FX, owner configuration, protected-runtime
+installation and Railiance recovery proof. T06 remains `wait` for the admitted
+real-model and natural queue run. No factory policy, paid execution, deployment,
+profile promotion or G0 grant was created by this source change.
+
 ## Re-prove one governed profiled run and close residuals
 
 ```task