Prepare exact native recipient and record approval service activation

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6

docs/evidence/2026-09-14-openrouter-recipient-install.json

@@ -0,0 +1,32 @@
+{
+  "status": "recipient_installed_pending_admission",
+  "owner_digest": "22393c7e751e458fa64bb24305ee66a26bbe3993c5aba03ae1fc1a488e777b42",
+  "script_sha256": "dc1569f63ef74d73f0a735548c0573db2a1493f7ffc86945f52d0be9b27a3253",
+  "binding": {
+    "status": "configured",
+    "owner": "intelligence-radar-key-check",
+    "command": [
+      "/usr/bin/python3.12",
+      "-I",
+      "-B",
+      "/home/worsch/.local/share/secrets-engine/recipients/openrouter-key-check-dc1569f63ef7/openrouter_key_check.py"
+    ],
+    "cwd": "/run/user/1000/secrets-engine-openrouter-check",
+    "environment": {
+      "LANG": "C.UTF-8"
+    },
+    "files": {
+      "/usr/bin/python3.12": {
+        "sha256": "e50d468e8b0adfb05733f5b87b3cff34829c4a8c1aea50c865aa8bdfe4bb150f",
+        "private": false
+      },
+      "/home/worsch/.local/share/secrets-engine/recipients/openrouter-key-check-dc1569f63ef7/openrouter_key_check.py": {
+        "sha256": "dc1569f63ef74d73f0a735548c0573db2a1493f7ffc86945f52d0be9b27a3253",
+        "private": true
+      }
+    }
+  },
+  "credential_values_read": false,
+  "active_catalog_changed": false,
+  "runtime_trust": "system Python/stdlib maintained by root; executable and script pinned; -I -B isolates Python configuration"
+}