docs(authorization-obligations): approve requirements; design and research

Requirements approved by the maintainer in session. Design: closed
obligation facts (operations and dischargers), obligation shapes as a
second family in the mechanism store, sibling-set consistency and an
optional declared policy as the policy sources, a Dominance protocol
with an order-based default so the checker works function-local before
reachability and guard dominance land, findings at suspicion carrying
consistency_violation / declared_policy_violation / function_local as
data, reports, manifest and ranking fields, handler_context harvest
mode, leave-one-out per obligation kind, and an obligations lever with
pending policy clauses under the existing gate. All 44 acceptance
criteria traced.

Co-Authored-By: Claude Fable 5.1 <[email protected]>
Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG

.kiro/specs/authorization-obligations/spec.json

@@ -1,16 +1,16 @@
 {
   "feature_name": "authorization-obligations",
   "created_at": "2026-09-05T17:00:00Z",
-  "updated_at": "2026-09-05T17:00:00Z",
+  "updated_at": "2026-09-05T18:00:00Z",
   "language": "en",
-  "phase": "requirements-generated",
+  "phase": "design-generated",
   "approvals": {
     "requirements": {
       "generated": true,
-      "approved": false
+      "approved": true
     },
     "design": {
-      "generated": false,
+      "generated": true,
       "approved": false
     },
     "tasks": {
@@ -23,5 +23,6 @@
     "reachability-flow-model",
     "guard-dominance-regime",
     "corpus-seeded-mechanisms"
-  ]
+  ],
+  "approval_note": "2026-09-05 requirements approved by the maintainer in session ('approve the requirements and run the design phase')"
 }