Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

A provider now waits for a person before retiring more than three consumers
or half of what it holds, and deletes only when asked. The controller is that
person's way in: it keeps waiting and rejected sets as conditions, answers them
with retire approve|reject, lists and deletes retired consumers through the
provider's own tools on its machine, records each act in the hand-act log, and
probes for anything retired longer than thirty days (D11).

internal/link/contracts.go

@@ -42,6 +42,10 @@ var Contracts = map[string]Contract{
 		"catalogue's record, which is the order, so a late one reads the same record"},
 	KindCatchUp: {Unordered: "a catalogue asking what it missed: answered from the record, whenever asked"},
 	KindProvisioner: {Unordered: "a provider's newest word about a consumer, said again every fifteen minutes " +
-		"while it holds (ADR 0224): the condition keeps the last observed, and S8 says when the words stop",
-		Tests: []string{"TestAProviderFailingAConsumerBreaksAllWellUntilItRecovers"}},
+		"while it holds (ADR 0224): the condition keeps the last observed, and S8 says when the words stop. " +
+		"Its retirement word (ADR 0230) is unordered too: a waiting set is said again every fifteen minutes, " +
+		"and every other change is checked against the provider itself — `retire` and `cleanup` ask it, " +
+		"and the self-check's D11 asks it every run — so an older word read late is corrected by the next",
+		Tests: []string{"TestAProviderFailingAConsumerBreaksAllWellUntilItRecovers",
+			"TestARetirementWordIsKeptAsItsConditionNamingTheEmitterFromTheSubject"}},
 }