S00-022: Record blocked task and remediation handoff

Changes: Preserve incomplete work and blocker metadata for S00-022. This checkpoint does not mark implementation accepted.
Validation: Session ended with status blocked.
Blocker: Pinned libomemo.js@3.0.0 supplies real embedded WASM but is a different unaudited ratchet and excludes consumer SCE; no approved decision reconciles it with S00-022 retained audited engine/persistence requirement.

Task: S00-022
Agent: auto-crypto-bcd7f2a71667
Role: crypto
Action: claim
Status: blocked

Task title: Confirm or source a verified browser/WASM-capable OMEMO2 backend for the Web client endpoint

state/issues/S00-022-auto-crypto-bcd7f2a71667.json

@@ -0,0 +1,28 @@
+{
+  "title": "Record an approved browser OMEMO backend sourcing strategy",
+  "reason": "Pinned libomemo.js@3.0.0 supplies real embedded WASM but is a different unaudited ratchet and excludes consumer SCE; no approved decision reconciles it with S00-022 retained audited engine/persistence requirement.",
+  "reproduction": "npm view libomemo.js@3.0.0 succeeds; pinned tarball README and bundle inspection establish candidate scope, embedded WASM and unaudited/SCE boundaries. Existing wasm-unsupported probe exits 2. See state/evidence/S00-022-auto-crypto-bcd7f2a71667.md.",
+  "role": "orchestrator",
+  "reviewer_role": "security",
+  "scope": [
+    "docs/decisions/0003-browser-backend-decision.md"
+  ],
+  "outcome": "One explicit architecture/security/product-owner sourcing decision naming the retained engine browser port or authorizing bounded evaluation of an alternative, with license/support/security-assessment and persistence compatibility requirements, without waiving ENC-003/009/011.",
+  "steps": [
+    "Obtain explicit owner input naming a backend strategy; do not infer approval from candidate availability.",
+    "Record traceable primary sources, exact target, license/support constraints and required independent security assessment and SCE path.",
+    "If alternative engine is selected, require separate reviewed plan change for preservation wording before S00-022 resumes implementation.",
+    "Submit only the bounded decision for independent security review; do not implement crypto."
+  ],
+  "acceptance": [
+    "Explicit owner decision is recorded; the candidate is not declared audited or interoperable without evidence.",
+    "Decision preserves ENC-003/009/011 and identifies remaining browser/SCE/vector/persistence checks.",
+    "Any engine replacement is contingent on reviewed plan change; no silent replacement or implementation occurs."
+  ],
+  "checks": [
+    "Verify owner input and primary-source traceability for named target/license/support/security and SCE boundaries.",
+    "Independent security review confirms decision addresses engine/persistence preservation and contains no requirement bypass."
+  ],
+  "depends_on": [],
+  "requires_user_input": true
+}