Document the 9.0.0 observer-client contract and the version-3 linked-device ingest path in owner-facing co-experience language. Record that the device certificate identifies uploads and local capture data is released only after the journal proves it holds the same bytes.