Verify normalized task approval facts and preserve signed source types

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786

workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md

@@ -124,3 +124,19 @@ coercion/idempotence, expiry, signer removal and replay refusal. No service bind
 propagation, policy gate flip, identity mapping admission or production trust/key
 change was made. Independent source integration/review and actual whole-provider
 proof remain required. T01/T03 and WP8-T06 retain their open native obligations.
+
+2026-10-16 retained-registry successor source preparation adds only the existing
+signed Check/DENY preapproval flow. The original typed service proposal is sent
+unchanged; normalized native act and evaluated approval-free digest from the
+admitted producer record are used for normal Approval issuance. The original
+proposal then receives only the original issued claim. Final Check re-normalizes
+against retained owner registry/source facts, so authoritative drift refuses
+before CAS. No local registry algorithm, new endpoint, empty-registry workaround
+or consumer digest waiver is used. Signed DENY preparation has no independent
+permission/freshness window and cannot consume or execute; current caller and
+operation bounds are checked, and final signed ALLOW/source checks remain
+mandatory. Exact original JSON kinds and requested-target subsets refuse
+bool/int/float substitution while allowing extra authoritative registry facts.
+Actual provider proof preparation is separately waiting on frozen Access source
+and Approval's timestamp/transaction-clock repair; source native/trust/custody and
+actual task admission remain open. T01/T03 and WP8-T06 are not closed.