The release — POST /api/notes/{id}/release (?dryRun) for a person: the owner's note, its audience validated against the org graph, a narrowing applied with no check; otherwise its provenance labels (503 LABELS_UNAVAILABLE with nothing written or recorded when an owner cannot be asked), ReleaseAuthority for the caller and its grant handed to the HumanShareGate (NOTE/RELEASE), the event written first (OWNER_CONTENT when the note has no source), 409/403 refusals in ENFORCE, then NoteReleaseWriter m...