Record accepted budget and native credential review preparation

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c

docs/evidence/2026-09-27-native-spend-review.json

@@ -0,0 +1,147 @@
+{
+  "schema": "rein-metered-human-acceptance/v1",
+  "original": {
+    "dispositions": [
+      {
+        "actor": {
+          "kind": "person",
+          "sub": "uid=platform-root,ou=people,dc=netkingdom,dc=local"
+        },
+        "approval_id": "e9521804-8fce-4fbc-bfdf-8a1aa959fd61",
+        "at": "2026-09-27T18:05:35Z",
+        "id": "disp-ac17da64-a66c-4dcf-b38a-b9865cc4c406",
+        "memo_id": "infd-20260927-b01",
+        "memo_version": 1,
+        "note": null,
+        "presentation_id": "pres-dfb6ddd3-67eb-4ce4-9bd9-c4e186a6f868",
+        "reasons": [],
+        "verb": "accept"
+      }
+    ],
+    "submissions": [
+      {
+        "disposition_id": "disp-ac17da64-a66c-4dcf-b38a-b9865cc4c406",
+        "approval_id": "e9521804-8fce-4fbc-bfdf-8a1aa959fd61",
+        "state": "confirmed",
+        "approved_at": "2026-09-27T18:05:35+00:00"
+      }
+    ]
+  },
+  "original_execution_expires_at": "2026-09-27T17:35:00Z",
+  "original_usable_for_dispatch": false,
+  "reason": "confirmed acceptance occurred after the signed execution window",
+  "billing_confirmation": {
+    "source": "user reply in Codex session 2026-09-27",
+    "confirmed_usd_10_including_tax_and_conversion_fees_within_eur_10": true
+  },
+  "replacement_memo": "infd-20260927-b02",
+  "replacement_native_id": "1e73e514-ef74-4bff-83e7-fa88a3eaba0c",
+  "replacement_window": [
+    "2026-09-27T18:20:00Z",
+    "2026-09-28T18:20:00Z"
+  ],
+  "paid_dispatches": 0,
+  "host_policy_replaced": false,
+  "replacement_acceptance": {
+    "dispositions": [
+      {
+        "actor": {
+          "kind": "person",
+          "sub": "uid=platform-root,ou=people,dc=netkingdom,dc=local"
+        },
+        "approval_id": "1e73e514-ef74-4bff-83e7-fa88a3eaba0c",
+        "at": "2026-09-27T18:22:57Z",
+        "id": "disp-50329033-6c8b-4a78-a85b-40aa9b0272eb",
+        "memo_id": "infd-20260927-b02",
+        "memo_version": 1,
+        "note": null,
+        "presentation_id": "pres-17397b67-78cb-48dd-8ea4-2dd3977a6170",
+        "reasons": [],
+        "verb": "accept"
+      }
+    ],
+    "submissions": [
+      {
+        "disposition_id": "disp-50329033-6c8b-4a78-a85b-40aa9b0272eb",
+        "approval_id": "1e73e514-ef74-4bff-83e7-fa88a3eaba0c",
+        "state": "confirmed",
+        "approved_at": "2026-09-27T18:22:57+00:00"
+      }
+    ]
+  },
+  "credential_requests": [
+    {
+      "memo_id": "metered-20260927-provider-apply",
+      "catalog": "glas-claude-agent-dev-anthropic",
+      "action": "apply",
+      "approval_id": "0c05bd0a-f81f-451d-840c-5565628e2edc",
+      "human_control": true,
+      "status_at_create": "requested"
+    },
+    {
+      "memo_id": "metered-20260927-provider-verify",
+      "catalog": "glas-claude-agent-dev-anthropic",
+      "action": "verify",
+      "approval_id": "47f118a3-a86c-43ad-969d-42e09a0f45bb",
+      "human_control": true,
+      "status_at_create": "requested"
+    },
+    {
+      "memo_id": "metered-20260927-provider-exec",
+      "catalog": "glas-claude-agent-dev-anthropic",
+      "action": "exec",
+      "approval_id": "7b32443a-a817-400c-a130-01b9ef04c8ee",
+      "human_control": true,
+      "status_at_create": "requested"
+    },
+    {
+      "memo_id": "metered-20260927-worker-apply",
+      "catalog": "activity-core-metered-worker-token",
+      "action": "apply",
+      "approval_id": "2ce76d7f-01c3-4b63-8476-8d1230679769",
+      "human_control": false,
+      "status_at_create": "requested"
+    },
+    {
+      "memo_id": "metered-20260927-worker-verify",
+      "catalog": "activity-core-metered-worker-token",
+      "action": "verify",
+      "approval_id": "c2af4bcf-15b4-4305-aac1-acc7e4dcb099",
+      "human_control": false,
+      "status_at_create": "requested"
+    },
+    {
+      "memo_id": "metered-20260927-worker-exec",
+      "catalog": "activity-core-metered-worker-token",
+      "action": "exec",
+      "approval_id": "dc22666a-d5d7-46bc-9490-ebe9fe09dc38",
+      "human_control": false,
+      "status_at_create": "requested"
+    }
+  ],
+  "requester_extension_approved": true,
+  "review_deployment": {
+    "policy_version": "v6",
+    "policy_image": "sha256:86d74ae88bc3005bb6f1cc854e223f6f6abb6cbe66f74149f23951dc150032c9",
+    "review_source": "34eda52",
+    "review_image": "sha256:0557edffb0efccc2e283cb878bc3f85deacd8165b45eefde830c21f6f02710c8",
+    "exact_ordinary_ids_only": true,
+    "vulnerability_findings": 0,
+    "ready": true
+  },
+  "validation": {
+    "review_suite_passed": 386,
+    "review_suite_skipped": 65,
+    "policy_tests_passed": 8,
+    "native_engine_contract_and_exact_id_tests_passed": 17,
+    "requester_tests_passed": 4,
+    "token_time_tests_passed": 2
+  },
+  "host_controller_clock": {
+    "wheel_sha256": "89d1419f038eff485a27a4206a19101ce7ca2976092971bbc796a77188fc93ad",
+    "installed_into": "/home/tegwick/secrets-engine/.venv",
+    "source": "existing /opt/railiance-clock/wheels",
+    "pip_check": "passed",
+    "proof_runtime_changed": false
+  }
+}

workplans/REINAH-WP-0003-governed-runtime-integrity.md

@@ -946,3 +946,42 @@ admission and a natural queue attempt. The existing CCR-2026-0025 requester is
 scoped to three older frozen T03 requests; its owner must admit the reviewed
 six-request command before reuse. No provider credential was retrieved, paid
 run dispatched, or new task/workplan opened. T04's tenant-owner gates remain.
+
+### Confirmed spend renewal and six credential memos — 2026-09-27
+
+Original b01 acceptance was confirmed at 18:05:35 UTC, after its signed 17:35
+execution deadline. No run was dispatched. Replacement b02 was accepted and
+confirmed at 18:22:57 UTC, native ID `1e73e514-ef74-4bff-83e7-fa88a3eaba0c`,
+valid for the same single EUR 10 attempt from September 27 18:20 through
+September 28 18:20 UTC. The user separately confirmed from the billing account
+that USD 10 including tax and conversion fees fits EUR 10. No retry or extra
+attempt was added; the original signed record is preserved.
+
+The user explicitly approved extending CCR-2026-0025 to the frozen six-request
+packet. The contained requester created apply/verify/exec approvals for both
+provider and worker-token lanes, without entries or consumes, then exited.
+Receipt: Platform `docs/evidence/2026-09-27-metered-approval-requests.json`.
+The six memos are loaded and ready for human review under ids
+`metered-20260927-{provider,worker}-{apply,verify,exec}`.
+
+Implemented and deployed exact-ID opt-in for ordinary human review in Informed
+Decision, preserving default refusal, actual human identity and native ordinary
+control. Only the three worker approval IDs are enabled. Policy v6 admits the
+six exact memo/native digest pairs with the existing MFA bar. Review source
+`34eda52`, image `0557edff`; policy image `86d74ae8`; rollouts and readiness pass.
+The review suite passes 386 tests (65 skipped), the actual Approval Engine
+contract/exact-ID checks pass 17 tests, policy tests pass 8, and the requester
+and token-time suites pass 6. The candidate image scan reports zero findings.
+
+Installed the already-admitted Railiance Clock wheel (`89d1419f`) and its
+existing offline wheel dependencies in the host Secrets Engine controller venv;
+`pip check` passes. The immutable proof runtime, metered owner, spend policy and
+ledger were not changed. No provider/workload credential retrieval, approval
+consume or paid dispatch occurred. Evidence and exact IDs:
+`docs/evidence/2026-09-27-native-spend-review.json`.
+
+T05/T06 remain waiting for the six human credential dispositions, bounded native
+backend delivery/consume, natural execution and recovery acceptance. T04's
+existing tenant-owner gates remain. The plan stays blocked; no new task or
+workplan was opened. The previous unsigned-spend/requester-mandate blockers above
+are superseded by the confirmed evidence in this return.