[bordumb]

Summary

• Add task-bound human-to-agent read and write delegation to the general gateway, including bounded upfront and exact-confirmed actions, release accounting, credential leases, effect plans, and created-resource recovery.
• Add Google Drive/Docs and Airtable installed demo paths, with source-backed live evidence, independent provider observations, and fail-closed uncertainty cases.
• Add AP-SPEC-071, supporting ADRs, tests, and an acceptance audit that distinguishes completed live runs from remaining qualification work.
• Fix horizontal overflow assertions in the packaged Stripe and Airtable demo workbenches.

Verification

• Local gateway, recipe, companion CLI, and Python tests were run during implementation; individual live runs and evidence pins are recorded in docs/program-log/2026-10-25-ap071-acceptance-audit.md.
• The most recent post-entry population response-loss run observed one Google write, an unknown Auths result, exact independent provider readback, and no retry.
• git diff --check passed before the final commit.

Still open for full AP-SPEC-071 acceptance

• Production credential custody and installed artifact qualification.
• Remaining hostile-case matrix and cross-provider qualification, tracked in the acceptance audit.
• A human activity view with linked completed-effect receipts.

This PR is a draft until those gates are complete. Live demo credentials, tokens, and private evidence remain outside the repository.