[intel352]

The owner grant form defaults to seven days and shows saved expiry in the browser locale. This defaults to one day, displays the proposed absolute UTC instant before confirmation, submits that same whole-second instant, and displays retained grants in UTC. Changing lifetime or tenant clears confirmation; an expired proposal stops before POST.

Exact source 8a3d10561fc64a0498786c5fa5904ddf483bd8cb, tree 9141fca123397bcdb55f37d80e8c35362374567d, adds only the UI repair and its operational explanation after frozen Auth66 7971f86. The full stack targets main for ordinary CI; Auth63/64/65/66 protected prerequisite gates remain separate and unchanged. Jon approved the exact Auth63 missing-review override; it merged once as 8cdbeec07d3431d2830d9bb0fd58385384d9c69a with protections retained and actual-main CI independently passing. Auth64 now has separate normal integration draftPR68 at aa5a972; no override is authorized for it or the later frozen follow-ups. No merge, retarget, credential, grant or activation is requested by this draft.

Local diff/gofmt and embedded JavaScript syntax checks pass. Independent source review found no findings. All five ordinary CI checks passed at this exact source tree (CI38089652684, CodeQL38089651150 and grpc38089652752); actual logs prove all seven required PostgreSQL17 groups, race and vet, with211 top-level PASS and zero skipped/failed tests. Independent source/CI receipts also reproduce the prior and new module checksums offline. The matched consumer PR149 browser run38090115781 now passes all4 mandatory scenarios with no skips/failures. Actual Pacific-timezone evidence proves default1day, the same displayed/POST instant 2026-10-11T22:15:22.000Z, retained UTC visibility, expired proposal0POST and lifetime confirmation reset. Current desktop/mobile screenshots were inspected. Native owner create/revoke/audit/current-policy and twice-reopened PostgreSQL stores pass; the unrelated frontend/CMS fixtures use isolated memory stores and do not establish hosted durability. Actual hosted activation remains pending stable releases and a matched consumer.

[intel352]

Closing as incorporated by merged #63/#68 (#68). Rechecked exact predecessor head 8a3d10561fc64a0498786c5fa5904ddf483bd8cb. Its entire tree 9141fca123397bcdb55f37d80e8c35362374567d equals merged #68/current main d2b174bec8e06dfee519d17380d46242cc765af7. No unique source work remains in this predecessor. The branch, commits and historical receipts are retained; this closure grants no credential or hosted activation authority.