the-custodian/docs/changes/netkingdom-target-2026-10-16/decision-native-preparation

Secrets native CLI admission preparation

The six-file source patch is preparation and documentation only. Review exact base/files/hash in integration-manifest-r1.json; canonical owner is unchanged. The CLI runtime AST differs only by a corrected explanatory docstring.

The proposal names11 serving authorization call sites across10handlers (including exec companion delegation), one shared signed Check client, and0/11 current native effect acceptance. Session-revoke, service-auth identity and route ambient-readiness paths are explicit exclusions. Generic CLI CAS is not silently relabeled strict R2 task consumption. There is no execute-ccr CLI command or admitted task placement.

A fresh bundle was built offline from a separate CLEAN canonical ff1a13d checkout, which includes packaging and strictR2. Its source/artifact hashes and exact manifest are retained; c80 proof bundles remain intermediate evidence only. No installation occurred. Actual signer kid/public key/fingerprint/custody inputs stay null; no synthetic key filled them. The proposed lifecycle trust template's empty key map was proved to refuse before credential/network access. Scanner is clean6 blobs.

Access/Platform/Approval owner-return artifacts are referenced with hashes. Native caller/key/pin/package placement, source/provider/audit receipts and actual approved CCR/catalog/grant/expectation inputs remain explicit. Future B2 out-of-band fresh Approval facts require owner-reviewed correspondence while preserving original context; no equality relaxation, digest translation or new schema/helper was added. Root owns integration/consistency and any separately authorized later admission.