feat(k1): add physical acceptance transport

docs/01_IMPLEMENTATION_PLAN.md

@@ -21,7 +21,7 @@ Each gate produces evidence and an explicit GO, PAUSE or BLOCKED result.
 | Stage 7 observation archive | GO (point/pose/telemetry contract) — durable catalog, recovery, capture-clock-bounded RRD preparation, archived metric time series, saved-session timeline and atomic playback are implemented |
 | Stage 7 recorded cameras | GO (contract), acceptance pending — acquisition-owned fMP4 archive and player are implemented/tested; one real archived K1 camera plus point-cloud session has not passed playback yet |
 | Plugin isolation | GO (laboratory control plane) — vendor backend/frontend and optional scene controls are plugin-owned; manifest/runtime descriptor parity, versioned handshake, lifecycle health and transport correlation fail closed while execution remains in-process |
-| K1 application control | PAUSE (dormant runtime gate complete) — plugin v0.4.0 exposes operator-confirmed shadow arm/disarm/state; authority is held in a 15–300 s non-exportable lease and revoked on expiry, reprovision, acquisition preparation or shutdown; orchestrator is facade-owned, but no emission method/live sink exists and vendor writes remain false |
+| K1 application control | PAUSE (physical-acceptance software gate complete) — plugin v0.4.0 runtime remains dormant/write-disabled; a separate uninstalled transport now enforces the retained MQTT session, exact response subscriptions, QoS2 one-shot operation keys, five response-gated batches and poison-on-unknown behavior; Keychain provisioning and physical START/STOP remain unexecuted |
 | Stage 8 product storage | PAUSE — retention, replication, encryption, capacity monitoring and long-run browser/WASM stress remain deployment gates |
 
 USB project copying remains optional ground truth rather than a blocker for the
@@ -46,9 +46,15 @@ is now wired into the XGRIDS facade and plugin manifest. Explicit operator arm
 loads the Keychain value into a bounded 15–300 second process-memory lease;
 expiry, disarm, reprovision, acquisition preparation and shutdown drop both the
 lease and orchestrator. Public state contains only lease timing/booleans. There
-is deliberately no batch-emission method, live MQTT sink or UI button. Keychain
-item provisioning, a separately reviewed write-capable type and durable
-post-stop save remain unproven. The physical button is the known-safe fallback.
+is deliberately no batch-emission method, live MQTT sink or UI button in the
+installed runtime. A separate physical-acceptance-only transport and dialogue
+executor now implement the reviewed MQTT exchange without facade/UI wiring.
+Each operation key is consumed before publish, automatic reconnect and
+application retry are forbidden, and any unknown outcome poisons the transport.
+The one-time `k1link authority provision` command delegates secret entry to the
+macOS Keychain TTY prompt and validates through the production loader without
+receiving the value in argv/environment/file/browser state. The command has not
+been run. Physical START/STOP remain untested; the button is the safe fallback.
 
 The Stage 6 live path uses a bounded raw-first bridge: loss in the visualization
 queue cannot discard MQTT evidence. The queue holds four preview messages;
@@ -267,7 +273,7 @@ useful stream is decoded or structurally identified.
 - firmware or internal-Linux analysis;
 - physical end-to-end shared-timeline playback for a newly archived session
   containing point cloud plus one selected K1 camera;
-- operator-owned Keychain item provisioning, separately reviewed emission transport
-  and stable-artifact proof after the observed stop lifecycle;
+- operator-owned Keychain item provisioning, operator-present physical use of
+  the reviewed acceptance transport and stable-artifact proof after STOP;
 - long-running large-session WebViewer/WASM memory telemetry;
 - production retention, replication, encryption and cross-platform packaging.