Correct SECRETS-WP-0009-T03 B3: metered-once is a queue claim

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 226514@bnt-lap001
Assistant-Session: 26ba103d-05fe-45a1-9cd7-9475bf239df6

workplans/SECRETS-WP-0009-glas-claude-native-delivery.md

@@ -392,3 +392,23 @@ provider request, zero on refusal, artifact unchanged). Receipt:
 `messages_policy.model` will be `claude-sonnet-5`. Next: private SpendPolicy, ledger
 `spend init` and owner config on railiance01 (HFACT-WP-0001-T01/T04).
 No credential, approval, profile activation or worker change.
+
+### 2026-09-23 correction: the paid run is a queue claim
+
+The earlier B3 correction was wrong for this task. It read the Glas acceptance
+runner, which makes its own fixture. The T03 exec path is different:
+`rein-aharness metered-once` runs one Activity Core claim cycle
+(`docs/owner-bootstrap.md`), and the SpendPolicy binds `worker_id`,
+`activity_definition_id`, `target_repo`, `project` and `repository_grant_id`
+(`docs/spend-admission.md`). The policy is immutable once `spend init` runs, so
+all of these must be fixed first:
+
+- target repo: a throwaway git repo on railiance01, no remote (operator-approved);
+- repository grant v1: `PROOF.md` only, exactly one commit, `publish: false`;
+- a production Activity Core definition carrying that grant and
+  `harness.agent-dev-local@1.1.1`, left disabled until the attended run;
+- a worker identity and worker token for the metered owner. The existing
+  `rein-aharness-claim-loop.service` on railiance01 claims by label, so the run
+  needs a label it does not claim, or it could take the paid run.
+
+No SpendPolicy, ledger, owner config, repo or definition was created.