feat: admit managed requests within lease authority

[thymikee]

Summary

Exact managed requests resolve matching lease authority, admit the allocator-held claim, and confirm the command-plus-teardown horizon before native binding. Readiness activates after cleanup adoption and operation projection. Reviewed operations execute inside lease admission. Request disposal cancels pending admissions and revokes captured operations before cleanup, preserving shared renewal and late-binding cleanup ownership.

Based on published #2312 9195cb7b37ba0af09a1c6b7c3b58e2a0c1545293, rooted in main snapshot 80997b6bf1dda30ca57d74dc42036f6b447e16ad. Seven files, 616 gross lines. ADR 0021 documents the configured seam; skills are unchanged. Unconfigured managed requests remain refused. Publication/recovery coordination and live Host/Simlock acceptance remain future work.

Validation

Head 9d6b3a784dfdd0648f4c05386101c63f2fb30091:

• pnpm check:affected --run: all runnable gates pass; 4,230 affected tests across 550 files.
• Focused instrumented suite: 31 tests pass, including all 16 provider-integration scenarios. The admission helper has 100% line/branch coverage; both owning modules total 98.61% lines and 92.5% branches. Integration and Coverage select the relocated scenarios.
• All 420 exact-parent closure checks pass; typecheck passes.
• Independent adversarial review: READY. Observed red proofs cover mismatched authority before renewal, cancellation during renewal and after adoption, immediate revocation before cleanup, and real dispatch inside admission.

GitHub CI is pending; publication does not wait for it. The prerequisite #2308 iOS retry remains failed at a depth-1 snapshot after AX target resolution fell back to XCTest. Fixture evidence is not live managed-device acceptance.

[github-actions]

Size Report

Metric	Base	Current	Diff
Installed (including dependencies)	4.48 MB	4.49 MB	+1.8 kB
Package (unpacked)	4.48 MB	4.49 MB	+1.8 kB
Package (download)	1.33 MB	1.33 MB	+649 B

Startup median (7 runs, lower is better):

Scenario	Base	Current	Diff
CLI --version	27.8 ms	26.7 ms	-1.0 ms
CLI --help	82.8 ms	78.4 ms	-4.4 ms

[thymikee]

Sentinel at 9d6b3a7 against 9195cb7: clean coordinator + independent Terra/high code review. Matching lease authority and allocator-held claim precede native bind; operations execute inside admission; readiness activates after adoption/projection; disposal revokes pending/captured work before cleanup. Regression scenarios exercise the composed dispatch and cancellation/fence boundaries. Exact-head CI, including Coverage and Integration, is green; size is +1.8 kB. This is deliberately a configured seam, not production Host activation: the publication/recovery coordinator and live Host/Simlock acceptance are still absent. Evidence-pending, not merge-ready; provide live allocator-owned request/operation/teardown evidence and land the prerequisite stack, including resolving #2308 failing iOS CI. No readiness label, fixes or merge.