Bind wrapped issuance to native metadata and preserve immutable recipient attempts

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade

docs/task-scoped-openbao-execution-contract.md

@@ -311,3 +311,24 @@ this change does not make them verified human representation. Existing generic
 consume receipt validation limitations remain explicitly separate. service-jwt
 readiness guard/default and ordinary actions remain unchanged. T01 stays in
 progress, T03 stays wait, WP13 stays proposed, and WP8-T06 stays open.
+
+## D3 wrapped-delivery primitive and its separate entitlement
+
+D3 P3=b chooses response-wrapped issuer delivery with one-time unwrap. The
+existing wrapped-handoff primitive now verifies native TTL/accessor/creation-path
+metadata and reserves a private immutable recipient file before minting. Native
+KV-v2 creation paths include the `data/` endpoint; caller-requested CLI paths
+cannot substitute for returned metadata. Failed mint/write or an altered
+reservation retains an uncertain attempt and never silently overwrites/remints.
+
+A disposable local OpenBao integration proves the exact source path,60-second
+TTL, successful first unwrap and specific HTTP400 consumed-token replay denial.
+This proves backend semantics, not the estate's first delivered lane, audited
+initiating principal, consumer identity, independent owner acceptance or cleanup
+under crash/revocation. Production CLI wrapping remains fail-closed. Existing
+metadata execute-ccr contracts expressly exclude wrap/KV value delivery and cannot
+be borrowed for this purpose. A separate exact owner-admitted delivery operation
+must bind actor,path,audience,deadline,authorization/consume state,destination,
+audit,replay/crash recovery and rollback before native adoption. The prepared
+D2 repository-issuer lane remains attended until its own reviewed execution and
+independent destination/adoption proofs pass.