docs(P00): grill — v1.26 adversarial review (9 challenges, PROCEED 0.84, 2 revisions)

---ci---
project: acdl
phase: 0
milestone: v1.26
status: grill
verdict: PROCEED
confidence: 0.84
revisions: [G-Q4 REQ-322 to P2 W0, G-Q6 enforcement-deferred note, G-Q9 key-split future item]
---/ci---

.ciagent/PLAN.md

@@ -195,7 +195,10 @@ policy-engineer (kyverno-json policies).
 - **Task 4.1** (policy-engineer):
   `adapters/kyverno-json/policies/settlement-finality/all-matches-committed.json`
   — kyverno-json policy over settlement-service status JSON (asserts
-  `all_committed: true`).
+  `all_committed: true`). **Note (G-Q6):** the policy is authored +
+  tested in v1.26; *enforcement* is deferred to the milestone that
+  binds qa/prod/dr (D-208 — the policy gates promotions, not dev
+  applies).
 - **Task 4.2** (policy-engineer):
   `adapters/kyverno-json/policies/pilot-readiness/no-placeholder-account.json`
   — kyverno-json policy over env JSON (asserts
@@ -386,4 +389,22 @@ schema time. This makes P2 self-contained: the primitive + the contract
 | REQ-321 (docs) | P4 | W2 | lead-developer |
 
 This revision is a binding plan decision (G-Q8 in the grill may
-challenge it).
+challenge it).
+
+---
+
+## Future Hardening Items (not in v1.26 scope, documented per grill G-Q9)
+
+- **`NOVA_AWS_*` key-split:** v1.26 uses a single `NOVA_AWS_*` key with
+  root-equivalent permissions (D-207, confirmed empirically by the
+  bootstrap). A future hardening milestone should split this into a
+  `NOVA_BOOTSTRAP_AWS_*` root key (bootstrap only) + a least-privilege
+  `NOVA_AWS_*` runner key (the spike-runner pattern). The pilot scope
+  (single account, no production workloads, OIDC default) bounds the
+  risk.
+- **Multi-account landing zone:** qa/prod/dr on separate accounts (D-208
+  keeps them placeholder in v1.26).
+- **D-083 lift:** S3 Object Lock + JWS tamper-evident ledger (when the
+  pilot becomes a production system, D-204).
+- **Multi-validator BFT consensus:** D-201.
+- **Other security types:** bonds (T+2), derivatives, options (D-200).