S00-022: Record blocked task and remediation handoff

Changes: Preserve incomplete work and blocker metadata for S00-022. This checkpoint does not mark implementation accepted.
Validation: Session ended with status blocked.
Blocker: All ten live npm metadata queries fail with EAI_AGAIN resolving the configured proxy, including the known libsignal-client control. Required release and artifact verification for S00-022 cannot proceed; failures are not E404 evidence.

Task: S00-022
Agent: auto-crypto-316a193d6c3e
Role: crypto
Action: claim
Status: blocked

Task title: Confirm or source a verified browser/WASM-capable OMEMO2 backend for the Web client endpoint

state/issues/S00-022-auto-crypto-316a193d6c3e.json

@@ -0,0 +1,29 @@
+{
+  "title": "Restore approved npm registry connectivity for the OMEMO2 backend investigation",
+  "reason": "All ten live npm metadata queries fail with EAI_AGAIN resolving the configured proxy, including the known libsignal-client control. Required release and artifact verification for S00-022 cannot proceed; failures are not E404 evidence.",
+  "reproduction": "npm view libomemo.js version license dist-tags --json --fetch-retries=0 --fetch-timeout=15000 --cache=/tmp/luma-s00-022-npm-cache -> exit 1 EAI_AGAIN; same failure for @signalapp/libsignal-client. See state/evidence/S00-022-auto-crypto-316a193d6c3e.md.",
+  "role": "ci-cd",
+  "reviewer_role": "security",
+  "scope": [
+    "docs/decisions/0003-registry-connectivity.md"
+  ],
+  "outcome": "One independently reviewed connectivity record proving that the fresh project agent can retrieve real libomemo.js and libsignal-client metadata and a pinned candidate artifact through approved HTTPS registry access.",
+  "steps": [
+    "Obtain environment-owner confirmation that approved proxy/DNS/registry access is restored for the agent sandbox; never record credentials.",
+    "Reproduce the two npm metadata queries using a temporary cache and normal certificate validation.",
+    "Verify a pinned candidate artifact can be downloaded and integrity checked in a temporary directory without executing package scripts.",
+    "Record exact commands, exit codes, versions and integrity result in the bounded connectivity document; submit for independent review."
+  ],
+  "acceptance": [
+    "Both known-control and candidate npm metadata queries return actual registry responses without EAI_AGAIN.",
+    "A pinned candidate artifact download and integrity check succeed over normal HTTPS.",
+    "No TLS/proxy-policy bypass, secrets, crypto implementation or backend acceptance; remediation only restores network access."
+  ],
+  "checks": [
+    "npm view @signalapp/libsignal-client version --json --fetch-retries=0 --fetch-timeout=15000 with a temporary cache",
+    "npm view libomemo.js version license dist.integrity dist.tarball --json --fetch-retries=0 --fetch-timeout=15000 with a temporary cache",
+    "Pinned artifact retrieval and registry integrity verification without install scripts"
+  ],
+  "depends_on": [],
+  "requires_user_input": true
+}