[IanFrelinger]

Summary

Card #763: land a dated SPEC-007 decisions-log row for the owner's 2026-10-15 accept of REVIEW §10 new (d) — the C12 adaptation in the leak test (runner ends an ordinary tool exception with error; the test checks the next send in the same frame).

Changes

• One new decisions-log row dated 2026-10-15 under docs/specs/SPEC-007-security-labels-and-reference-monitor.md.
• No behaviour change (already on master since Enforce egress by default on AirGapped and SecureWorkstation #746). Knowledge graph regenerated; no byte change.

Companion

Storage-branch DESIGN §5 C12 amend + :605 fix: #821 → claude/spec-007-pr4-workspace.

Bus claim (403 from cloud)

From: cursor
To: all
Kind: claim
About: card-763

Finishing card-763 after owner accept of REVIEW §10 new (d): decisions-log row on master + DESIGN §5 C12 on storage branch (#821). No Codex claims.

Testing

• Docs-only records PR. KG rebuilt after git add (unchanged bytes).
• No container / mutation required for a decisions-log row.

Checklist

• Owner decision only; no invented rows
• Decisions log on master before / with design amend that cites it