Close local runtime loose ends and record external blockers

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c

docs/owner-bootstrap.md

@@ -71,3 +71,25 @@ positive fake stream and pre-forward insufficient-capacity refusal are separate
 cases. It checks unchanged artifact digest and teardown. Queue/provider/key/profile
 are disposable fixtures, never evidence of live admission. The project records the
 candidate result in `prj-helixforge-factory/evidence/2026-09-09-owner-bootstrap.json`.
+
+
+## Current metered admission review — 2026-09-27
+
+The credential catalog now configures the metered owner and companion, so the
+older pending-holder paragraph above is historical. The corrected owner policy and Secrets Engine 11cc0d5 are installed after
+explicit user approval; native spend/delivery approval remains open. Use
+`../secrets-engine/docs/proposals/glas-metered-20260927/README.md` for exact inputs.
+
+The proof script requires `--profile-ref` and `--expected-model`; for the current
+b6e4e8a4 artifact use `--profile-ref harness.agent-dev-local@1.1.1
+--expected-model claude-sonnet-5 --context-tokens 1000000
+--max-output-tokens 64000 --input-rate 4 --output-rate 10
+--extra-beta mid-conversation-system-2026-04-07` in addition to runtime/hash.
+The fixture price input is explicit and still grants no paid authority. A passing
+first-response proof does not prove a tool loop or native provider compatibility.
+
+Add `--tool-cycle` for a synthetic EUR 10 parent envelope and two provider
+requests with an actual Bash git-status tool result. This passed on Railiance;
+receipt: `docs/evidence/2026-09-27-sonnet5-tool-session-proof.json`. The fixture
+uses native USD 1/max-turns 4 and total EUR 30, not the live owner spend policy.
+The requested inactive EUR 10 proposal is in the factory operations directory.