Remove retired lock authorities

docs/config.md

@@ -255,9 +255,6 @@ publish:
     - source: narratio.artifact.session_recap
       dest: artifacts/session_recap.md
       required: true
-  locks:
-    - source: narratio.artifact.session_recap
-      reason: manual post-publish edits
 ```
 
 Rules:
@@ -268,7 +265,8 @@ Rules:
   a rule names that source; the Notarius index and complete bundle are not
   publish sources.
 - `outputs[].required` defaults to `true`.
-- static locks (`pipeline.publish.locks`) merge with remote locks (`{session_prefix}/locks.yml`), with static locks taking precedence on duplicates.
+- publish locks are independent remote session objects managed with
+  `narratio session locks`; they are not pipeline configuration fields.
 
 ## Full Schema
 
@@ -302,9 +300,6 @@ Rules:
 | `pipeline.publish.outputs[].source` | string | Yes (per rule) | must reference built-in or configured artifact source |
 | `pipeline.publish.outputs[].dest` | string | Conditional | derived if omitted and source supports derivation |
 | `pipeline.publish.outputs[].required` | bool | No | `true` |
-| `pipeline.publish.locks[]` | list | No | empty |
-| `pipeline.publish.locks[].source` | string | Yes (per lock) | must reference supported publish source |
-| `pipeline.publish.locks[].reason` | string | No | empty |
 | `pipeline.whisperx.transcribe_url` | string | Yes | absolute `http` or `https` URL |
 | `pipeline.whisperx.language` | string | No | `en` |
 | `pipeline.whisperx.timeout` | duration | No | `30m` |

docs/internal/stage-publish.md

@@ -115,9 +115,9 @@ Includes counts/lists for:
 ## Resume Semantics
 
 The versioned semantic fingerprint covers enabled behavior, run-upload policy,
-normalized source/destination/required output rules, the currently supported
-configured lock field, and the remote backend, bucket, region, endpoint, and
-root-prefix identity. Rule and lock ordering is canonicalized. Credential
+normalized source/destination/required output rules, and the remote backend,
+bucket, region, endpoint, and root-prefix identity. Rule ordering is
+canonicalized. Credential
 environment names, path-addressing transport mode, local workspace placement,
 and run identifiers are excluded. Independent remote locks remain mutable state
 and are read directly by publish at planning and commit boundaries; semantic

docs/operations.md

@@ -345,11 +345,11 @@ outcome changes also stale affected downstream stages, while an identical
 repeated `notarius_disabled` self-skip does not repeatedly invalidate them.
 
 Publish reuse additionally tracks enabled/run-upload behavior, normalized
-output rules, the currently supported configured lock field, and remote
-backend/bucket/region/endpoint/root identity. Credential environment names,
-local workspace placement, and run IDs are excluded. Regardless of semantic
-reuse evidence, executing publish reads independent remote locks directly and
-rechecks initially unlocked sources before commit selection.
+output rules, and remote backend/bucket/region/endpoint/root identity.
+Credential environment names, local workspace placement, and run IDs are
+excluded. Regardless of semantic reuse evidence, executing publish reads
+independent remote locks directly and rechecks initially unlocked sources
+before commit selection.
 
 ## Publish Workflow
 

docs/roadmap/implementation.md

@@ -318,7 +318,7 @@ accurate lock and inspection commands.
 
 ## Stage 9 — Remove Retired Lock Authorities
 
-**Status:** Pending
+**Status:** Completed
 
 ### Goal