MP2-016: align delegate request lease with broker budget

[Miko997]

Outcome

Problem

PR #192 proved that the delegate request helper's eight-minute signed lease can fall below the broker's required pre-reservation budget after a complete provider readback, even though the broker and documented task-authority contract already permit a maximum ten-minute window.

User-visible behavior

None. Protected merge admission remains fail-closed; valid delegate-normal requests receive the already governed ten-minute processing window.

Changes

Scope

The helper now uses a named ten-minute lease constant, the existing test node asserts that exact bound, and the maintainer contract documents the shared helper/broker window. Both observed eight-minute requests were rejected before durable reservation; their evidence remains retained. The already-reviewed ManiSkill lock correction from PR #192 is included here because the vulnerable main lock otherwise prevents this prerequisite authority correction from qualifying, while the broken helper prevents PR #192 from using delegate-normal.

Compatibility

The request schema, signatures, digests, identities, task authority, provider checks, exact-source binding, and broker maximum remain unchanged. The broker still rejects requests with 180 seconds or less remaining before reservation. The ManiSkill support profile remains Python 3.12; only indirect urllib3 moves from 2.7.0 to fixed 2.8.0.

Evidence and research impact

No product evidence or research claim changes. This is an MP2-016 owner-normal authority-boundary correction needed before PR #192 can resume delegate-normal. Exact-head run 36760893936 is retained as evidence for CVE-2026-97687, CVE-2026-97688, and CVE-2026-97689; it is not relabeled or retried into PASS.

Validation

Tests

• Focused helper, program-delegation, broker, currentness, and security tests: 77 passed.
• Ruff and format checks passed.
• Strict documentation build, lock check, generated-currentness checks, and diff check passed.
• Python dependency audit against OSV after the lock correction: no known vulnerabilities.
• Independent review found no issues and confirmed that no test identity was added or removed.
• Exact-head hosted qualification is required before protected merge.

Documentation

The broker maintainer contract states that the rootless helper uses the same bounded ten-minute window already accepted by broker validation. Requirements, capability-ledger, functional-inventory, and public-surface currentness records were mechanically regenerated.

Boundaries

Privacy and security

No credentials, private data, recordings, workflows, rulesets, repository settings, trust roots, protection settings, publication authority, or broker admission controls change. No dependency is added; the vulnerable indirect lock is advanced to its fixed release.

Checklist

• The pull request is focused and its diff has been reviewed.
• New or changed behavior has tests, including a relevant failure path.
• Focused checks pass locally; required complete qualification must be green for the exact candidate before merge.
• User-facing commands, support boundaries, and documentation remain truthful.
• Third-party material has compatible licensing and required attribution.
• No credentials, private recordings, personal data, or identifying workcell data were added.
• Frozen v0.2.0 evidence, checksums, measurements, tag, and DOI metadata were not rewritten.
• Current package capabilities are not attributed to the v0.2.0 SoftwareX evidence or the TIM v0.1.3 measurements.

[Miko997]

metriplane-owner-merge-request:v1
{"authorization_mode":"single-maintainer-owner-attestation","base_ref":"main","base_sha":"59c849b85313bea98ff4a1dbf24dac7375713ed3","changed_paths_digest":"d9959aac105c3fb2f8c329896b41a2d2a980b5ce8213f995f9cd53cb85dafe71","collaboration_digest":"97956f2c016d6323f4e7921877599536bc72d63f26a73a3ab9e2d91abaf909d4","expires_at":"2026-09-30T19:56:46Z","head_sha":"a316480578291c1809d13a2f1db7013d94cd8385","health_generation":136,"nonce":"d652efd11841245f8ec04aa12d08c42e","pull_request":193,"repository":"Miko997/metriplane","requester_id":141511110,"ruleset_digests":{"20613848":"1296e1ef0e46ed8e2a0e05a73440b0be9f9ef0b9d250fb2e403f8f8538719a92","21487681":"c1689c8b834e31c319fd16007fced5f10fc939fed655fc32f47d0c03e5df6fce","21500579":"a9666448444c28603d7b16f36a866f3c3ebf008107e0e495b8433a5726fd115a","21533351":"4a6c626d1ff8d57dc3aef04b6c65769e750fb1d1ed866bf7ed60902553c8a671","21633569":"6f4993da872387e0b31ca5366be448a9cb7eae69154f36710af2d235eb80ca2b","22071973":"4ffe0846af53a2317c364cc75611de62063f81fa96828c7216aa773b20ed2f17","22170798":"f80feda5478325925ad17452287e49470fea71fe2f0a6706f61f9fa24e5627d4"},"schema_version":1,"state_commit":"303f4b0c1fef4975c0ad23fdfdb66249e4f848dc"}