Accept ADR 0050 — model access is vendor-agnostic

Verified and ratified: model-access stays one vendor-blind provision; per-vendor
adapter keyed by licence.vendor (mirrors public-dns registrar providers); the
sealing-vs-central-rotation carve-out bounded to refreshable-grant vendors /
refresh token / manager node only. Status proposed -> accepted; index regenerated
(records + index checks pass); design doc note updated.

Claude-Session: https://claude.ai/code/session_01LrgweAeERJYBg88c5cKDzF

02-DECISIONS/0050-model-access-is-vendor-agnostic.md

@@ -1,6 +1,6 @@
 ---
 topic: what runs on it
-status: proposed
+status: accepted
 date: 2026-09-05
 deciders: jochen
 reconstructed: false

02-DECISIONS/README.md

@@ -118,7 +118,7 @@ python3 00-META/checks/index.py            fail if stale
 - **0047** — [A module runs its code as its own process, with its own account](0047-a-module-runs-its-code-as-its-own-process-with-its-own-account.md)
 - **0048** — [A provider creates the credential the mesh minted, and seals nothing](0048-a-provider-creates-the-credential-the-mesh-minted.md)
 - **0049** — [A consumer's identity is bounded by the tightest backend that must accept it](0049-a-consumers-identity-fits-the-tightest-backend.md)
-- **0050** — [Model access is vendor-agnostic, and a vendor is an adapter](0050-model-access-is-vendor-agnostic.md)  *(proposed)*
+- **0050** — [Model access is vendor-agnostic, and a vendor is an adapter](0050-model-access-is-vendor-agnostic.md)
 
 ### How it is built
 

03-DESIGN/01-to-be/14-model-access.md

@@ -107,10 +107,10 @@ observability, changing a binding — and the binding is then declared as usual.
 plainly is what stops the declaration language growing a conditional**, and nothing built here
 grew one.
 
-## The vendor-agnostic generalisation (proposed)
+## The vendor-agnostic generalisation
 
-*[ADR 0050](../../02-DECISIONS/0050-model-access-is-vendor-agnostic.md) is proposed and not yet
-ratified; this section describes what it decides. The section above stands as what is built.*
+*[ADR 0050](../../02-DECISIONS/0050-model-access-is-vendor-agnostic.md) is accepted; this section
+describes what it decides. The section above stands as what is built today.*
 
 What runs is one vendor — the mesh's Anthropic feature. A read-only trace asked whether the
 `model-access` provision is Anthropic-shaped or genuinely general, and found that the general layer