Record operator inputs for SECRETS-WP-0009-T03 activation

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 272244@bnt-lap001
Assistant-Session: c8962fa7-b290-47df-865f-403ddb6c77e9

workplans/SECRETS-WP-0009-glas-claude-native-delivery.md

@@ -295,3 +295,24 @@ Lane-specific residue, in order:
 Circular wait noted: HFACT-WP-0001-T04 waits on this task's admission while this
 task waits on the owner config; the operator inputs in step 1 break it.
 No credential read, no approval created, no policy or role changed.
+
+### 2026-09-21 operator inputs
+
+Received from the operator (Bernd), recorded here as inputs, not authorization:
+
+- Placement: railiance01 runtime copy (`5371156d…`).
+- Spend envelope: per_run_eur 5, daily_eur 20, total_eur 500; per-run
+  max_liability_usd 5.75 and max_budget_usd 5.00 (derived from EUR 5 at the stated
+  FX); eur_per_usd from 1 EUR = 1.15 USD; expires 2027-01-31. The operator's
+  USD 600/800 figures are overall caps and are dominated by total_eur 500 (= USD 575).
+- EUR 100/month: recorded as an operator-reviewed limit, not enforced; SpendPolicy
+  has no monthly ceiling. Follow-up for rein-aharness to add `monthly_eur`.
+- authority_ref: no CCR exists; the operator wants a budget decision in the
+  Informed Decision framework. That record becomes `authority_ref`.
+- Model: keep this Anthropic lane with a Claude default for MessagesOwner.
+  Separately, the llm-connect default moves to DeepSeek V4.1 Flash (llm-connect
+  change, not this task).
+- Negative identity: the operator delegated this. Plan: use the existing
+  CCR-2026-0019 approval-client reader token from the attended Warden session
+  (real, reviewed, scoped only to its own KV path) written to a 0600 tmpfs file.
+  No new identity or authority is minted.