feat(k1): add physical acceptance transport

README.md

@@ -151,9 +151,14 @@ orchestrator passes all retained response barriers. The installed publisher
 boundary is structurally write-disabled and cannot call its sink. Plugin v0.4.0
 wires a dormant coordinator into the facade: explicit shadow arm holds authority
 for at most 300 seconds and expiry/disarm/reprovision/acquisition/shutdown revoke
-it together with the orchestrator. No emission method or live sink exists, no UI
-button claims device control, `vendor_writes_enabled` remains false, and no
-application command is sent.
+it together with the orchestrator. A separate, uninstalled physical-acceptance
+transport now reproduces MQTT 3.1.1 `clean_session=false`, keepalive 60, exact
+response subscriptions, QoS2 completion and the five response-gated batches.
+It consumes operation keys before publish and poisons unknown outcomes without
+retry. An interactive Keychain administration command provisions through
+Apple's hidden prompt without putting the authority in argv. Neither component
+is wired to facade/UI; `vendor_writes_enabled` remains false and no application
+command has been sent.
 
 This locked bootstrap is repeatable in the current workspace, not yet a
 standalone release install. The frontend consumes sibling `file:` packages from