feat(k1): recover exact application bootstrap

plugins/xgrids-k1/profile_loader.py

@@ -425,7 +425,7 @@ def _validate_acquisition_control(profile: dict[str, Any]) -> None:
         if mapping.get("header_contract") != {
             "device_id": "explicit-observed-identity",
             "session_id": "{device_id}:ModelingRequest",
-            "openapi_key": "explicit-observed-value-with-unresolved-provenance",
+            "openapi_key": "private-application-level-runtime-authority",
         }:
             raise CompatibilityProfileError(
                 f"{action_id} header contract differs from retained evidence"

plugins/xgrids-k1/profiles/README.md

@@ -37,9 +37,10 @@ is observed, but its media decoder/replay flags remain independent.
 The v1 loader rejects every `write_enabled: true`. Owner-operated LixelGO wire
 capture verifies the `ModelingRequest` topic, action values, field layout,
 literal `{device_id}:ModelingRequest` session relation, retained start settings
-and numeric success code. The bounded codec accepts an OpenAPI value only as an
-explicit secret; its provenance and secure provisioning are unresolved, as are
-durable save completion, timeout and rollback behavior. Acquisition therefore
+and numeric success code. Retained client/wire evidence identifies OpenAPI as
+one private application-level value rather than a per-scanner profile. Its
+secure runtime loading remains unresolved, as do durable save completion,
+timeout and rollback behavior. Acquisition therefore
 stays `operator-manual` through the verified physical double-click.
 The standalone encoder models the recovered wire schema, including enum values
 outside the retained request. It is not an authorization policy: any future

plugins/xgrids-k1/profiles/fw-3.0.2/direct-lan.v1.json

@@ -348,7 +348,7 @@
           "header_contract": {
             "device_id": "explicit-observed-identity",
             "session_id": "{device_id}:ModelingRequest",
-            "openapi_key": "explicit-observed-value-with-unresolved-provenance"
+            "openapi_key": "private-application-level-runtime-authority"
           },
           "request_fields": {
             "project_name": "required-operator-value",
@@ -359,7 +359,7 @@
           },
           "success_result_code": 302252033,
           "required_unresolved_context": [
-            "OpenAPI credential provenance and secure provisioning",
+            "secure private application-authority loading",
             "authorization policy for any setting outside the retained request",
             "timeout, rejection and rollback contract"
           ],
@@ -401,12 +401,12 @@
           "header_contract": {
             "device_id": "explicit-observed-identity",
             "session_id": "{device_id}:ModelingRequest",
-            "openapi_key": "explicit-observed-value-with-unresolved-provenance"
+            "openapi_key": "private-application-level-runtime-authority"
           },
           "request_fields": {},
           "success_result_code": 302252033,
           "required_unresolved_context": [
-            "OpenAPI credential provenance and secure provisioning",
+            "secure private application-authority loading",
             "save-completion and final-standby state mapping",
             "timeout and rollback contract"
           ],