Extracted foundations: ok-identity (validated principal and delegation scope records; not credential issuance) and ok-evidence (bounded records and digests; not trust or authorization).
Planned in order: immutable spec revisions and proposals; generic action/policy and exact approval bindings; durable transaction/event/receipt semantics; independently enforced one-use execution leases; task pause/review/resume. First end-to-end proof should use a synthetic resource and a dummy connector with tamper, replay and uncertain-outcome negative tests. These are 2ok-owned milestones, not a copy of any consumer's backlog.