docs: reconcile personal-agent secondbrain apply route

docs/contracts/personal-agent-runtime-readiness-snapshot.json

@@ -24,9 +24,11 @@
         "read_only_imessage": true,
         "memory_domain": "secondbrain-personal",
         "orgbrain_forbidden": true,
+        "secondbrain_intake_contract": "ready",
+        "secondbrain_governed_apply_route": "defined-no-live-apply",
         "package_runtime_claims": false
       },
-      "remaining_gap": "Profile aggregate runtime readiness still false until final acceptance packet."
+      "remaining_gap": "Profile aggregate runtime readiness still false until final acceptance packet and approved live apply."
     },
     {
       "surface": "mail.read",
@@ -125,8 +127,8 @@
     {
       "id": "secondbrain-apply-blocked",
       "severity": "must-fix",
-      "state": "proposal route exists; durable apply remains blocked",
-      "impact": "personal memory intake is not durable yet"
+      "state": "proposal route and governed apply route exist; live durable apply remains blocked without approval",
+      "impact": "personal memory intake can be proposed and checked, but is not live-applied yet"
     },
     {
       "id": "desktop-adapter-exposure-blocked",
@@ -171,6 +173,7 @@
     "proton_contacts_gate_repair": "blocked-follow-up",
     "proton_bridge_systemd_convergence": "blocked-follow-up",
     "proton_rclone_child_registration": "blocked-follow-up",
+    "secondbrain_governed_apply_route": "defined-no-live-apply",
     "secondbrain_durable_apply": "blocked-follow-up",
     "desktop_adapter_exposure": "blocked-follow-up",
     "reboot_power_loss_drill": "optional-follow-up",