feat(k1): add offline control execution gate

docs/07_MISSION_CORE_MONOREPO.md

@@ -148,7 +148,8 @@ START/STOP, correlates live DeviceInfo/modeling responses and maps bounded
 device-status values into an observation-only state machine. The OpenAPI value
 is one private application-level authority; vendor ID and serial come from the
 BLE-selected live K1 and are cross-checked against status. No MQTT publisher
-exists. Secure authority loading and stable-artifact proof after STOP remain
+exists. A fixed Keychain loader and offline response orchestrator are present;
+operator execution-lease wiring and stable-artifact proof after STOP remain
 unresolved, so `vendor_writes_enabled=false`.
 
 ## Semantic lifecycle
@@ -221,8 +222,8 @@ views.
 4. Physically accept a newly archived left/right K1 session, then package the
    read-only RTSP/H.264 adapter for each target OS, add disk-backed sealed media
    caching and evolve same-host MSE delivery toward an authenticated Edge media
-   plane. Keep the modeling-command publisher disabled until private application
-   authority loading and durable-save confirmation close its separate safety
+   plane. Keep the modeling-command publisher disabled until operator-owned
+   Keychain execution-lease wiring and durable-save confirmation close its safety
    gate.
 
 Complex equipment will likely be assembled from separately useful component