feat(k1): add offline control execution gate

plugins/xgrids-k1/profiles/README.md

@@ -38,9 +38,10 @@ The v1 loader rejects every `write_enabled: true`. Owner-operated LixelGO wire
 capture verifies the `ModelingRequest` topic, action values, field layout,
 literal `{device_id}:ModelingRequest` session relation, retained start settings
 and numeric success code. Retained client/wire evidence identifies OpenAPI as
-one private application-level value rather than a per-scanner profile. Its
-secure runtime loading remains unresolved, as do durable save completion,
-timeout and rollback behavior. Acquisition therefore
+one private application-level value rather than a per-scanner profile. A fixed
+read-only macOS Keychain loader and offline response orchestrator now exist;
+operator-owned provisioning/execution-lease wiring, durable save completion,
+timeout and rollback behavior remain unresolved. Acquisition therefore
 stays `operator-manual` through the verified physical double-click.
 The standalone encoder models the recovered wire schema, including enum values
 outside the retained request. It is not an authorization policy: any future

plugins/xgrids-k1/profiles/fw-3.0.2/direct-lan.v1.json

@@ -359,7 +359,7 @@
           },
           "success_result_code": 302252033,
           "required_unresolved_context": [
-            "secure private application-authority loading",
+            "operator-owned Keychain authority provisioning and execution-lease wiring",
             "authorization policy for any setting outside the retained request",
             "timeout, rejection and rollback contract"
           ],
@@ -406,7 +406,7 @@
           "request_fields": {},
           "success_result_code": 302252033,
           "required_unresolved_context": [
-            "secure private application-authority loading",
+            "operator-owned Keychain authority provisioning and execution-lease wiring",
             "save-completion and final-standby state mapping",
             "timeout and rollback contract"
           ],