Implement WP-0022 audit trail and WP-0023 INTENT–SCOPE closeout

Add unified metadata-only audit.jsonl with secret-material guard, instrument
sign/access/worker paths, and expose warden activity CLI. Surface broker hint
when VAULT_TOKEN is unset, refresh INTENT/SCOPE docs, and add production
integration checklists plus catalog lane promotion playbook.

wiki/PolicyGatedSigning.md

@@ -230,6 +230,19 @@ Cross-repo references:
 4. Keep `fail_closed: true` unless an explicit break-glass procedure exists.
 5. Smoke allow and deny paths; preserve non-secret evidence only.
 
+### Rollback
+
+If signs are blocked after enabling the gate:
+
+1. Set `policy.enabled: false` in `warden.yaml` (inventory + TTL gate only).
+2. Confirm `warden sign` succeeds without flex-auth.
+3. File a State Hub note to `flex-auth` with non-secret symptoms (HTTP status,
+   `fail_closed` behaviour, actor name).
+4. Re-enable only after flex-auth runtime and registry are verified.
+
+Evidence fields for the flip: flex-auth health URL, smoke script exit codes,
+`warden activity --kind sign --json` showing `policy_decision_id` on allow path.
+
 ---
 
 ## See also