Record confirmed human approvals and pending attended reader login

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6

docs/evidence/2026-09-14-t03-approved-awaiting-reader.json

@@ -0,0 +1,19 @@
+{
+  "observed_at": "2026-09-14",
+  "status": "waiting_for_attended_reader_login",
+  "human_reviews_confirmed": 3,
+  "approval_states": {
+    "apply": "approved",
+    "verify": "approved",
+    "exec": "approved"
+  },
+  "consumed_actions": [],
+  "reader_warden_exit_code": 5,
+  "command_handoff": false,
+  "native_execution_receipt_exists": false,
+  "local_attended_login_root_removed": true,
+  "possible_login_session_revocation_confirmed": false,
+  "provider_key_read": false,
+  "inference_performed": false,
+  "tests_passed": 414
+}

workplans/SECRETS-WP-0010-openrouter-native-access.md

@@ -52,7 +52,7 @@ and bounded plan are review artifacts, not runtime grants.
 
 ```task
 id: SECRETS-WP-0010-T03
-status: progress
+status: wait
 priority: high
 state_hub_task_id: "2aa6d2d3-bebc-5ae2-a04b-1bb2e9605405"
 ```
@@ -196,3 +196,16 @@ The attended owner procedure is in platform scripts/t03-native-execution.py and
 t03-attended-delivery.py. It uses the exact scoped client reader, contained
 platform administration, named/pinned native pods, private runtime storage, and
 native CLI handlers. No approval has yet been consumed by this preparation.
+
+
+### Attended reader handoff pending — 2026-09-14
+
+Informed Decision confirms three native submissions and delivered audit records;
+Approval Engine still records all three actions approved and unconsumed. The
+attended reader login exited 5 before handing off the command. Warden removed
+its isolated helper/home; it could not confirm revocation of any possible issued
+login session. No owner procedure started, no approval was consumed and no
+provider key was read. Asked the operator whether the browser sign-in window
+opened before retrying. Do not repeat the human memo approvals. T03 remains wait
+for the attended credential flow and actual execution. Metadata receipt:
+`docs/evidence/2026-09-14-t03-approved-awaiting-reader.json`.