Open an observation, create an operator-owned working document that keeps the event reference, select exact supporting events and versions into a hashed context snapshot, request a proposal from a pluggable runner, inspect the diff against the exact base version, and accept or reject it. Acceptance appends a version through the trusted mutation path and records a judgment with the existing recorder; rejection records a decision without touching the document; a stale base fails closed. Writes ride the signed review-capability path. One deterministic fixture runner; the fx runner is a documented seam only. Includes a loopback-only synthetic demo server and spec/documents.md.