the-custodian/docs/changes/netkingdom-target-2026-10-16/decision-handoff

Strict Secrets task handoff source package

Review implementation-r1.patch on c80a944 independently of the CLI packaging revision. Exact source hashes, public API and tests are in the integration manifest.

The module calls the real existing serving claim/signed Check validators, retains immutable served artifacts, verifies exact descriptor/request/native approval and enforced caller joins, then exposes a process-local one-shot strict CAS handoff. It refuses missing/mismatched/coerced response fields and historical idempotence. No raw mapping/boolean/authorizer callback supplies authorization. Platform must bind its owner Plan, reserve durable journal, call this consume, independently GET-confirm actual original Approval consumption and journal it before native.

Focused tests: 246 pass. Full: 736 pass/16 fail/1 skip; exact16 failure IDs match the unchanged canonical baseline's temporary-path ownership refusals, with zero new failure IDs. All failing initial observations are retained; no guard was weakened. Pinned scanner is clean5 blobs and whitespace checks pass. Real producer Go signatures and local HTTP are exercised; the fixture caller/approval are synthetic.

No live key/trust, policy admission, server mapping, service binding propagation, backend entitlement or protected effect is claimed. WP13 native work remains open. Platform owns the independent actual-provider/Access-serve whole-stack proof.

R2 supersedes R1 with an exactness repair: independently recompute the served native act digest, because Python dict equality can equate True and integer1 in registry enrichment. The retained R1 counterexample accepted that malformed fact; R2 refuses it. Public interface and all source gates are unchanged. Review full implementation-r2.patch or tiny r1-to-r2.patch; R1 is retained unchanged. R2:247 focused pass; full737 pass/16 baseline failures/1skip; scanner clean5.