Add scoped native history and window agent controls

docs/agent-observability-requirements.md

@@ -34,3 +34,13 @@ requests, including durations and named code stages. Debug collection is central
 managed, bounded and disableable. Operational spans do not silently become a raw
 content or credential archive. Backend tracing and collector/SIEM permissions,
 encryption and retention must complete the end-to-end pipeline.
+
+## Current implementation evidence
+
+Earlier status sentences above are superseded by individual DPAPI/PQ identities,
+targeted revocation, scoped library/bookmark controls, protected download/gesture
+metadata and the history/window capabilities described in
+[agent-history-window.md](agent-history-window.md). The broader requirements remain.
+History and window debug stages are now named children of completed protected RPC
+actions, with durable actor attribution. Full replay/content capture, safe visual
+export, persistent restoration and broader secured administration are still open.