Add protected interaction evidence and measured debugging phases

docs/requirements-audit.md

@@ -477,3 +477,27 @@ Final current-source full Electron smoke passed in
 was restarted only after process/listener identity verification and its health
 check passes; the protected collector remains healthy with zero rejected writes.
 Grant publication integration is covered by `tests/agent-grants-publication.test.mjs`.
+
+## Protected interaction and debugging increment
+
+Default-off signed interaction capture now records confirmed guarded clipboard
+operations and completed agent clicks as protected metadata, with exact
+device/event/action/session binding. Native proof verifies analyst decryption,
+audited access, independent review, live selective disable and continuing download
+metadata capture. General physical-click replay and controlled content capture
+remain open. See `docs/interaction-evidence.md`.
+
+Agent session titles now pass aggregate DLP inspection before export; credential
+titles are masked and an actual native confidential-title proof preserves the
+session ID. Legitimate credential form-submission exceptions remain unverified.
+
+Evidence delivery has correlated capture/challenge/encrypt/send/ack/store phases.
+Policy reconciliation adds fixed named verification/bookmark/page/agent/audit
+phases. Export failure totals survive disable/reconfiguration within the process.
+Signed policy continues to govern telemetry; pre-enrollment startup uses bounded
+local snapshots rather than unauthorized export. These changes have 520 passing
+tests, including actual OTLP and signed policy fixtures. Final verification after
+service-attributed native diagnostics tests passes 522 tests. The actual native
+browser proves diagnostic export stops on revocation; Windows build and packaged
+source/runtime verification pass. Production completeness
+and the broader original open requirements are not implied.