# EUR 10 native tool-proof candidate — 2026-09-27

Existing work: REINAH-WP-0003-T05/T06 and SECRETS-WP-0009-T03.
The user approved one disposable attempt. This packet is not installed or active.
Native spend request e9521804-8fce-4fbc-bfdf-8a1aa959fd61 is awaiting the human
at https://decisions.coulomb.social/review?memo_id=infd-20260927-b01.
Exact window: 2026-09-27T16:35:00Z through 2026-09-27T17:35:00Z.
Do not extend this window or treat an unsigned/expired memo as spend authority.

`spend-policy.json`, `owner.json` and `catalog/` are replacement candidates only.
The native ID is a requested reference, not evidence of acceptance.
`activation-review.json` passes the offline bounds review with two USD 4.64 holds.
`native-pdp-inputs.json` records the six exact requests and live native evaluator
responses from the named flex-auth-secrets-engine pod over Kubernetes port-forward.
These input bindings are not approval entries, consume receipts or execution authority.
The temporary ten-minute caller credential was destroyed after collecting them.

Host readback still matches owner e0d3fb84 and spend file f31c5859. Reservations,
request_routes and request_reservations remain empty. Recheck under owner lock
before replacement; preserve original policy/ledger and retire the old dispatch
capability. The new ledger filename is a candidate only; never reset old state.

Remaining gates: human spend acceptance, billing/FX including taxes and fees,
exact new native credential approvals and delivery, clock admission, host pins,
and one natural queue attempt with teardown/revocation. CCR-2026-0025 currently
limits its attended requester to three frozen older T03 requests. Admit a reviewed
command and these six exact requests through that owner before reusing the reader;
do not silently broaden it or submit these as the older records. Existing owner
work remains the tracking record; no task or workplan is added.