docs(plans): m1-notifications — delivery, the boundary crate, and the…

[Poordeveloper]

… fidelity window

Materializes accepted policy (PRODUCT §7, ADR 0015 D7) on the mechanism grill Q12 accepted conditionally. The finding that shapes it: entitlement already refuses heuristic and unsealed evidence before a claim can reach a main state, so every attention item on the wire is one a notification is permitted for. The Desktop therefore needs no wire change and derives nothing — it decides only whether it has already shown an item, which is presentation state. Delivery is a pure function of two poll generations with a baseline rule for cold start and reconnect; the Objective-C delegate is confined to a new corral-macos crate, the only one allowed unsafe. Blocked on the packaging PRs for a real .app and on three rulings.

Claude-Session: https://claude.ai/code/session_01Upz8uJ32B4RyE1AkthMQJX

Class:
Reason:
Escalation triggers:

Goal

Non-goals

Evidence

./scripts/verify

Compatibility

Risk / staging

---

Does this change touch:

• the protocol or anything on the wire
• storage, schema, or durable events
• runtime or PTY ownership
• provider integration or the user's provider configuration
• security, trust, or authorization
• an architecture invariant or an accepted ADR