docs: record owner confirmations for ADR 0032 Q2 (audit durability) and Q5 (webhook payload)

Owner-confirmed 2026-06-13: audit durability stays a critical consumer (not
promoted to interceptor-veto) — M2 unblocked; webhook delivery uses a redacted
public-event payload derived after audit redaction, never raw RunEvents.

Constraint: docs only; records decisions, no code change
Tested: docs validator 0 errors
Confidence: high
Roadmap-Status: unchanged

Author: johnteee

docs/generated/docs-inventory.md

@@ -414,7 +414,7 @@ Do not edit this file manually — regenerate instead.
 | `ops/security-hardening.md` | working | 11733 | `0a385c7dab82` |
 | `ops/troubleshooting.md` | working | 9127 | `4921b6d50f5c` |
 | `permission-and-approval-playbook.md` | working | 6560 | `813bc74bb156` |
-| `plans/adr-0032-m1-m6-work-plan-2026-06-13.md` | archive | 36760 | `240b4bafd910` |
+| `plans/adr-0032-m1-m6-work-plan-2026-06-13.md` | archive | 36790 | `7790f2ad1f9d` |
 | `plans/agent-ecosystem-acceptance-roadmap-2026-05-31.md` | archive | 29099 | `7c4a4972cfeb` |
 | `plans/community-pain-points-response-plan-2026-06-05.md` | archive | 7276 | `571d010133ad` |
 | `plans/competitive-positioning-plan-2026-05-31.md` | archive | 8726 | `d16dfd2bdd99` |

docs/plans/adr-0032-m1-m6-work-plan-2026-06-13.md

@@ -757,14 +757,15 @@ owner-gated and must be confirmed before their phase begins.
 1. **Evidence default (M2):** RESOLVED — parity-run both paths until M3, then
    make event-derived the default. **No fallback flag** (a flag is a second
    code path that rots).
-2. **Audit durability as veto:** RESOLVED, **OWNER-GATED before M2** — keep it
-   a *critical consumer* (M1 behavior), do not promote to interceptor-veto.
+2. **Audit durability as veto:** RESOLVED, **OWNER-CONFIRMED 2026-06-13** —
+   keep it a *critical consumer* (M1 behavior), do not promote to
+   interceptor-veto. M2 is unblocked.
 3. **`integration/event_stream.py`:** RESOLVED — retain as a compatibility
    facade until M6, then delete under the M6 orphaned-eventing validator.
 4. **M1 byte-equivalence scenario:** RESOLVED — minimal lifecycle echo run,
    frozen as `test_m1_audit_stream_matches_frozen_contract`; five-minute proof
    stays an e2e guard, not the equivalence fixture.
-5. **Webhook payload:** RESOLVED, **OWNER-GATED before M6** — redacted
+5. **Webhook payload:** RESOLVED, **OWNER-CONFIRMED 2026-06-13** — redacted
    public-event payload derived *after* audit redaction; never raw RunEvents.