RB-07 unblocks signing ADR-C-009 (its clause 4, "writes are admin-capability-gated and audited", now holds) and closes CQ-004's outstanding half. RB-10 landed parseStoredSession twice, once per app, deliberately — recorded so a later reader does not file it as duplication. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>