Finish companion catalog work and reconcile completed approval tasks

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e324-abce-7e51-bb2b-496f097afdb0

catalog/glas-claude-agent-dev-anthropic.yaml

@@ -3,8 +3,8 @@ kind: kv
 org: coulomb
 repo: sand-boxer
 stage: prod
-description: Proposed native exec-env delivery for CCR-2026-0016. KV custody exists;
-  no runtime grant or activation yet.
+description: Catalog-bound metered owner with Activity Core worker-token companion.
+  KV custody exists; native runtime approval and activation remain SECRETS-WP-0009-T03.
 mount: platform
 path: workloads/glas-harness/claude-agent-dev
 mount_management: existing
@@ -19,12 +19,46 @@ consumers:
 workload_delivery: []
 delivery_config:
   exec_owner:
-    status: pending
-    owner: rein-aharness MessagesOwner with sand-boxer runtime boundary
-    reason: Exact installed metered-once runtime is proved; native holder review,
-      immutable owner configuration and private state/profile/service admission
-      remain SECRETS-WP-0009-T03 and HFACT-WP-0001-T03/T04. No arbitrary child may
-      receive this key while the owner binding is pending.
+    status: configured
+    owner: rein-aharness MessagesOwner (metered-once) with sand-boxer runtime boundary
+    command:
+    - /home/tegwick/.helixforge-factory/runtimes/b6e4e8a429393d68831c996a65c0489664205df969ac9882e581983ec2da4969/bin/python3
+    - -I
+    - -B
+    - -m
+    - rein_aharness.cli
+    - metered-once
+    - --owner-config
+    - /home/tegwick/hfact/owner-metered/owner.json
+    cwd: /home/tegwick/hfact/owner-metered
+    environment:
+      PATH: /usr/bin:/bin
+      LANG: C.UTF-8
+      HOME: /home/tegwick
+      ACTIVITY_CORE_URL: http://127.0.0.1:8010
+      AGENT_HARNESS_WORKER_ID: rein-aharness-metered@railiance01
+      AGENT_HARNESS_OPS_LABELS: hfact-metered
+      AGENT_HARNESS_OPS_LABELS_MODE: all
+      AGENT_HARNESS_EXECUTION_PROJECT: prj-helixforge-factory
+      AGENT_HARNESS_REQUIRE_SPEND_ADMISSION: '1'
+      AGENT_HARNESS_REQUIRE_REQUEST_ADMISSION: '1'
+      AGENT_HARNESS_SPEND_POLICY: /home/tegwick/hfact/owner-metered/spend-policy.json
+      AGENT_HARNESS_SPEND_LEDGER: /home/tegwick/hfact/owner-metered/spend.sqlite3
+      AGENT_HARNESS_REPO_MAP: '{"hfact-glas-proof":"/home/tegwick/hfact/targets/hfact-glas-proof"}'
+    files:
+      /home/tegwick/.helixforge-factory/runtimes/b6e4e8a429393d68831c996a65c0489664205df969ac9882e581983ec2da4969/bin/python3:
+        sha256: e50d468e8b0adfb05733f5b87b3cff34829c4a8c1aea50c865aa8bdfe4bb150f
+        private: false
+      /home/tegwick/hfact/owner-metered/owner.json:
+        sha256: 0e263f8299a42f63caf3595ff3eb7adc10354673f7b5125e0811def3bea7c274
+        private: true
+      /home/tegwick/hfact/owner-metered/spend-policy.json:
+        sha256: f31c585916de1ea8bd8e48c72421803dfde1015e6201704b9320f77d2c545d9c
+        private: true
+    companions:
+    - catalog: activity-core-metered-worker-token
+      field: token
+      env: ACTIVITY_CORE_WORKER_TOKEN
 delivery_modes:
 - exec-env
 - read-check