docs(learning-tier): S1-GREEN grants bullet rewritten to decision 2 (names, not grants)

The stage list still said kiro allowedTools += W_auto and claude settings.json += W_auto,
contradicting the §7 verdict recorded two commits earlier. Now: names in every definition,
both grant files unchanged.

Author: NetDevAutomate

docs/architecture/learning-tier/plan-2026-09-19.md

@@ -70,7 +70,9 @@ Finish: N RED committed; `pytest` on a clean control worktree shows **exactly**
 ### S1-GREEN (1–2 days)
 - `mcp/tools.py`: `record_teachback` delegating to `history/teachback.py:27` through a **shared validator**
   extracted from `cli/_teachback.py` (one implementation, both surfaces; CLI kept).
-- Grants: kiro `allowedTools` += `W_auto`; claude `settings.json` += `W_auto`, `socratic-mentor.md` names them.
+- Names, not grants (owner decision 2, §7): `socratic-mentor.md`'s `tools:` line names each `W_auto` tool and the
+  readers; kiro `allowedTools` and claude `settings.json` **unchanged**; every other definition names the writers
+  through the projected protocol.
 - `agents/shared/recording-protocol.md`: YAML table (`trigger`, `writer`, `required_ids`, `consent`) + one-line
   prose per trigger: after teach-back **and learner agreement** → `record_teachback`; 2+ rounds without
   breakthrough → `log_struggle`; end of session → `log_topic` per concept touched; plan wind-down →