Redacted excerpt; full evidence withheld.

$ cd <host-path> && ls -la && cat README.md 2>/dev/null | head -300
exit: 0
authorized (re-check the
  receipt with `verify.js`); one-use / atomic consumption; proof-of-possession
  (`cnf` is reserved, unimplemented).
- **Bearer / replay / TTL.** Within TTL, a stolen grant authorizes the same
  operation/target/after-shape for any presenter. Replay against the same
  target is possible for bearer grants; deploy one-use profiles where atomicity
  is required. Default TTL is 300s.
- Retired `kid` → `UNKNOWN_KEY`. Grants are live execution permission;
  receipts may forensically verify a retired key, grants must not.

[excerpt truncated]