# Replacement-window metered proof candidate

Existing work: REINAH-WP-0003-T05/T06, SECRETS-WP-0009-T03.
One EUR 10 attempt; no extra attempt, retry or publication. Not installed.

The original memo infd-20260927-b01 was accepted and its native submission
confirmed at 2026-09-27T18:05:35Z, after its 17:35Z execution deadline. Preserve
that signed record. No dispatch was made under it. Its candidate remains evidence.

Replacement memo: infd-20260927-b02.
Requested native ID: 1e73e514-ef74-4bff-83e7-fa88a3eaba0c.
Window: 2026-09-27T18:20:00Z through 2026-09-28T18:20:00Z.
Human acceptance and native submission were confirmed at 2026-09-27T18:22:57Z.
The separate acceptance receipt is retained by informed-decision; this candidate
alone is not a runtime authorization or credential consume receipt.
User confirmed from the billing account in this session that USD 10, including
applicable tax/conversion fees, fits EUR 10. Recheck tariff validity at execution.

Offline review passes with two full USD 4.64 holds. native-pdp-inputs.json holds
six exact requests and live evaluator bindings collected through the named
Kubernetes-authenticated policy forward. Its temporary caller token was shredded.
These are not approval entries or consume receipts. Fresh authorization and
Clock admission remain required at the actual side effect.

No host policy or ledger changed. Preserve old ledgers, reconcile all liabilities,
and retire old dispatch before replacing pins. The user explicitly approved the CCR-2026-0025 extension for this frozen six-request
packet. The native requests were created successfully; see Platform
`docs/evidence/2026-09-27-metered-approval-requests.json`. Provider human review and companion ordinary
approval remain separate per-action gates. No new task or workplan is opened.

Six separate memos are loaded for human review under
`metered-20260927-{provider,worker}-{apply,verify,exec}`. Exact-ID ordinary human
review is deployed for only the three worker records; their ordinary control
type remains unchanged. Native dispositions/consume/backend delivery remain.

## Final attended outcome — 2026-09-27

The replacement was installed after the old ledger was proven empty and preserved.
All six decisions were accepted and consumed once. Both apply/verify lanes passed;
both exec sessions delivered credentials and were successfully revoked. The one
queue job `6efa9436-6a91-47c0-94e5-b31b5a0e7e3a` closed failed at attempt 1 with no
lease. The old worker omitted the typed grant; the worker was promoted through
GitOps and the exact existing definition grant was copied into the same unclaimed
row under guards. No second trigger or task was created.

The installed launchers referenced a deleted build directory. The sandbox probe
reproduced exit 127 with zero provider forwards. Builder fix `sand-boxer@81b5fcf`
and Rein pre-claim checks address the defect; the admitted artifact is unchanged.
The target repository is unchanged, the sandbox/workspace are destroyed, the
request route is revoked, and no credential directory or close-outbox item remains.
The parent EUR 10 reservation is still held; observed billing is unknown. No
ledger reset, successful model/commit proof, or retry is claimed. Corrected artifact
admission and owner accounting reconciliation remain in REINAH-WP-0003-T05/T06
and SECRETS-WP-0009-T03. Another attempt needs separate authority.

Canonical receipts: `rein-aharness/docs/evidence/2026-09-27-metered-{native-resume,
postflight,terminal-delivery}.json`; procedure: `rein-aharness/docs/native-metered-proof.md`.
Earlier sections record preparation-time state and are superseded by this outcome.