authorize-releaselisted

# /foundry:authorize-release A batch review surface over a release's atoms. Ergonomics only — it does NOT introduce an "authorize the release once" shortcut; every atom is authorized per-atom (each carries its own `acceptance-contract.yaml` + `authorized:` record, and `/foundry:dispatch` refuses to dispatch any atom that is not itself in state `AUTHORIZED`). ## When to trigger - "authorize release `<slug>`", "/foundry:authorize-release `<slug>`" — after the release is DRAFT-shaped (atoms enumerated) and BEFORE implementation dispatch (steel-man-1 ordering). ## Procedure 1. **Resolve** the release → its ordered atom list, each with a drafted `acceptance-contract.yaml`. Refuse any atom missing its contract (author it first). 2. **Review precondition.** Each atom's spec must have cleared the single-pass `/foundry:spec-review` (recorded content-bound; the deep opt-in `/foundry:audit` also satisfies it) or carry the operator `skip review; reason:` token. Authorization presumes REVIEWED specs. 3. **Batch display.** For each atom, show the scope + checkpoints the operator is signing (the per-atom dry-run from `foundry-authorize.py` without `--yes`). The operator reviews the whole wave at once. 4. **Per-atom confirm + freeze.** On operator confirmation, authorize EACH atom singly: ```bash python3 "${CLAUDE_PLUGIN_ROOT}/scripts/foundry-authorize.py" \ --spec <atom-spec> --contract <atom-contract> --operator <op> --mode <regular|lean> --yes ```