feat(#829): enforce whole mutator-class lease gate

docs/scratchpads/829-mutator-gate.md

@@ -36,6 +36,27 @@ Carried authority chain also verified/read for the locked T-B gate contract: SPE
 - Initial lease TTL is capped at ratified 300 seconds; callers may only shorten it.
 - Working budget assumption: 35K tokens; reduce documentation/refactor breadth before touching locked scope if pressure rises.
 
+## Progress and verification
+
+- RED #1: all 5 initial real-socket contract tests failed on WI-1 with `UNKNOWN_ACTION` or missing adapter behavior.
+- RED #2: register-before-exec runtime test failed because `launch-runtime.py` did not exist.
+- GREEN: broker-owned volatile lease state, 300-second maximum monotonic TTL, WI-1 token-backed promotion, all-tools runtime gate, Claude/Pi wiring, and register-before-exec launcher delivered without changing WI-1 peercred/ancestry authority.
+- Focused broker + gate acceptance: `43/43` GREEN.
+- Instrumented Python coverage: `88%` total — daemon `89%`, register/exec launcher `86%`, runtime gate `86%`.
+- Full repository suite: `43/43` Turbo tasks GREEN; `@mosaicstack/mosaic` `72/72` files and `1,377/1,377` tests GREEN.
+- Root typecheck: `42/42`; lint: `23/23`; format check and `git diff --check`: GREEN.
+- No author self-review was run. Exact-head terra CODE and Opus SECREV remain coordinator-owned gates.
+
+## Acceptance mapping
+
+| Acceptance criterion | Evidence |
+| --- | --- |
+| No consequential mutator succeeds while UNVERIFIED after observer revoke or TTL | `observer revocation and monotonic TTL expiry deny the next mutator` real-socket acceptance test |
+| T-B compromised-tool bypass is covered by the whole gate | `T-B raw and custom mutator tools are default-denied without shell parsing` across Claude/Pi built-ins, raw Bash class, MCP/custom/unknown tools |
+| Revoke-first / promote-last is structural | `revoke-first and promote-last structurally bracket mutator authority`; direct promotion rejected, pending remains denied, token consumption commits before VERIFIED |
+| Consume WI-1 auth/lease substrate | All transitions and decisions traverse merged peercred/ancestry authentication; promotion consumes the exact WI-1 CSPRNG cycle token |
+| M1 Claude + Pi | Claude `.*` PreToolUse and Pi `tool_call` invoke the same broker gate; register-before-exec test proves broker-minted parent identity reaches runtime descendants |
+
 ## Locked discipline
 
 - Re-verify and read the four authority artifacts before design or code.