rto-remote v1.17.0 — The remote model tier's consent gate, payload allow-list and egress record (ADR-0019) — the policy half of Roteiro's one explicitly-consented egress path, with no transport of its