[deku2026]

Widens the AF-CTR-03 task record before Contracts #121 merges, under execution-policy §1.6 and delivery-procedure step 1. The independent reviewer of Contracts #121 asked for this (finding F1).

Changes to AF-CTR-03

• Contracts paths gain:
  • public/http/**, for the new closed WebBrowserSession document;
  • src/public/dotnet/**, for the generated shapes and validators;
  • .gitleaks.toml, for the exact-row allowlist of the receipt's public digests.
• Scope:
  • the product IDs now include arcforges-web (ArcForges-Design AD-0021 §7, Design Record MR-85 fixed #43);
  • a new Contracts bullet names the additive product validations and the WebBrowserSession document (public/http/v1/web-browser.schema.json, routes /session/v1/web/*), which mirrors the frozen BrowserSession document. The frozen CON.07 documents stay unchanged under the later-services window;
  • session scopes no longer include agent: agent grants are AF-CTR-07's own records, bound to their AI client and account (AD-0021 §7);
  • the live e-mail adapters come last in the task; live delivery stays H-19/AR-14.
• Ledger: a note recording the widening and the delivery split: Contracts #121, then Cloud A1a, A1b, A2 and B.

python tools/plan.py validate --design <Design main>: 0 errors.

🤖 Generated with Claude Code

https://claude.ai/code/session_01H6Cf6pFe7uHMuN6zEgDLmW

[deku2026]

Review record: Plan #77

Reviewer: the independent AF-CTR-03 reviewer, a delegated agent that did not author this PR.

Verdict: approve at eabbb80. The final head, 129d3b7, applies the reviewer's two non-blocking findings to the existing text:

• N1. Acceptance bullet 1 now names the deployed acceptance center (proof.arcforges.com, on real PostgreSQL) after merge, or a local center where one is reachable. Windows has no PostgreSQL.
• N2. The deliverables now include feature availability, and the Contracts products and the WebBrowserSession document.

What the review checked

• The new Contracts paths cover all 51 files that Contracts #121 changes.
• The scope wording matches AD-0021 §7 and cloud-store.md §3 at Design 3392d02, and the coordinator's decisions: products, the WebBrowserSession document, scopes without agent, and live e-mail adapters last.
• The ledger note is accurate.
• plan.py validate reports 0 errors, and tests.test_plan passes 22.

Resolves finding F1 of the Contracts #121 review: #121 can merge at 640f072 once this PR merges.

---

Generated by Claude Code