fix: fail closed on unattested autorespond authority

[0thernet]

Summary

• stop treating sanitized command and permission labels as workspace authority
• keep file-change approvals observable but reject every blind acceptance path
• repair session attention on resolution and daemon restart without touching unrelated human attention
• add the Phase 7B runbook for future provider attestations and time-aware budgets
• re-pin the reviewed production package inventory

Validation

• focused autorespond/protocol/storage/service/content suite: 578 tests, 5,469 assertions
• two independent P0-P2 reviews: clean
• isolated exact-tree bun run check through hra-host-run: passed
• package archive: 164 entries / 7,520 canonical bytes, isolated install and daemon lifecycle passed

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
hra	Ready	Preview	Sep 6, 2026 8:11am UTC

1 Skipped Deployment

Project	Deployment	Actions	Updated
hra-app	Ignored		Sep 6, 2026 8:11am UTC