feat: import governed sandbox commits and enforce native CLI limits

Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc

workplans/REINAH-WP-0003-governed-runtime-integrity.md

@@ -9,7 +9,7 @@ owner: codex
 topic_slug: rein-aharness
 priority: high
 created: "2026-08-23"
-updated: "2026-09-04"
+updated: "2026-09-09"
 related:
   - REIN-A-0004
   - GLAS-IN-0002
@@ -623,6 +623,18 @@ deployment, and the next natural claim → active heartbeat → terminal run id
 will be returned to Activity Core after this change is published and deployed;
 no real workload will be delayed or expired to manufacture evidence.
 
+2026-09-09 implementation return: the worker now captures a bounded Git bundle
+through sandbox owner execution after rein cleanup, then validates and imports
+the exact one-commit result under its original baseline, grant and lease after
+successful teardown. The actual bwrap/Glas/worker test passed with a deterministic
+authoring fixture and response-lost close replay, without duplicate execution.
+Native profile USD/turn limits now reach Claude CLI controls and require valid
+terminal accounting; missing/exhausted accounting refuses success. Daily/total
+reservation, EUR treatment and live provider semantics remain HFACT-WP-0001-T01.
+The matching rein/Glas code must be rebuilt and admitted in the protected runtime;
+this local proof does not close live G1/G2 or authorize a model request. See the
+2026-09-09 runtime-transfer evidence and the owning runtime documentation.
+
 ## Re-prove one governed profiled run and close residuals
 
 ```task