Capture guarded human gestures and verify agent administration

docs/individual-agent-grants.md

@@ -24,4 +24,12 @@ reliable ownership support. Actual exported agent request traces carry named chi
 phases and link to attributable durable events. The package verifier runs the
 shipped individual client. A separate backend integration test exercises distinct
 reviewer publication and history restore; grant-specific native publication UI
-coverage remains an open acceptance gate.
+coverage is now verified by `scripts/agent-grants-history-admin-smoke.mjs`.
+It exercises the actual author and independent-reviewer UI, denied self-approval,
+read-only auditor, rotation and draft-only history restoration while preserving
+an unrelated unpublished draft. Exported requests have verified parent trace
+correlation; screenshots were visually inspected. The history summary warns
+that restoring a lower generation cannot revive invalidated credentials: publish
+a generation greater than every previously issued value and pair again.
+
+![Agent history review with credential-generation warning](media/screenshots/admin-agent-history.png)