docs: record integrated live-run policy P0 evidence
docs: harden live-run authorization review criteria
docs: bind live permits to host identity and locked runs
docs: specify deterministic live-run authorization policy