MP2-016: align delegate request lease with broker budget

docs/maintainers/main-health-broker.md

@@ -279,6 +279,11 @@ expired task authority, or an expired merge request still fails closed at
 every admission seal, and the existing pre-reservation merge-budget guard
 still applies.
 
+The rootless delegate request helper uses that same bounded ten-minute window.
+This leaves the broker's required pre-reservation budget intact after a complete
+provider readback without extending either the task authority or the maximum
+lease accepted by the broker.
+
 This mechanism is not active merely because the code exists. Until the owner
 grant, isolated attestor, read-only Linear credential, executor key and
 protected exact-main qualification exist, the broker fails closed and the

docs/status/public-surface-inventory.md

@@ -5,9 +5,9 @@
 # Public Surface Inventory
 
 - Task: `MP2-013` / `MET-78`
-- Materialization SHA-256: `bcebb284f7f70a868f6a699153d881228da6447197a96569905cbee0b6ac2890`
+- Materialization SHA-256: `224d03511dab2e7e2f4106446c23f5356a2e76cd48ed02378e8621a963e6da6c`
 - Owned rows: `11457`
-- Owned rows SHA-256: `b0e25424058ea8c8b576c4f97f9fb1b2ca607c170d188c2f235a299d05457cc5`
+- Owned rows SHA-256: `aea26629764d9f7bcac5479bc278c183030323095c00f7d6caf4c6ebf3cc5f0c`
 - Claim boundary: static staged-source observations only; no runtime, compatibility, or support claim.
 
 ## Families

tests/test_prepare_delegate_merge_request.py

@@ -5,6 +5,7 @@
 from __future__ import annotations
 
 import subprocess
+from datetime import timedelta
 from pathlib import Path
 
 import pytest
@@ -15,6 +16,8 @@
 def test_bounded_provider_read_rejects_errors_and_malformed_json(
     monkeypatch: pytest.MonkeyPatch,
 ) -> None:
+    assert request_builder.REQUEST_LEASE == timedelta(minutes=10)
+
     def failed(*_args: object, **_kwargs: object) -> subprocess.CompletedProcess[str]:
         return subprocess.CompletedProcess([], 1, "", "unavailable")
 

tools/prepare_delegate_merge_request.py

@@ -37,6 +37,7 @@
 EXECUTOR_ID = "01a096e0-4e21-7a11-9f0f-fb303387c5c0"
 STATE_BRANCH = "metriplane-main-health-state"
 RULESET_IDS = (20613848, 21487681, 21500579, 21533351, 21633569, 22071973, 22170798)
+REQUEST_LEASE = dt.timedelta(minutes=10)
 
 
 class RequestPreparationError(ValueError):
@@ -219,7 +220,7 @@ def prepare(
         "state_commit": state_commit,
         "health_generation": state["generation"],
         "issued_at": now.strftime("%Y-%m-%dT%H:%M:%SZ"),
-        "expires_at": (now + dt.timedelta(minutes=8)).strftime("%Y-%m-%dT%H:%M:%SZ"),
+        "expires_at": (now + REQUEST_LEASE).strftime("%Y-%m-%dT%H:%M:%SZ"),
         "nonce": secrets.token_hex(32),
     }
     subject["request_id"] = merge_request_id(subject)