DR-016 — OKF bundle medium: client-owned git repo stands; human edits are producer overrides

“Git vs local-fs” is a false fork — the git working tree IS the local-fs folder (reframe D8); git adds near-free rollback, per-change authorship/audit, atomic publish, and the diff substrate the human-review bridge depends on, all of which plain local-fs would force us to reinvent. The storage medium is never a product surface for non-technical users (access model: client owns the repo; consumption via app/viewer/MCP; storage is never the security boundary; direct git access = optional privilege). To close the v3-critic regeneration-clobber gap: approved human edits are captured as producer overrides (keyed by concept-path/section) re-applied on every regeneration — never direct file mutations — an id-132 producer invariant frozen before first publish. The accept/edit/reject review UI is a follow-on human surface (DR-013 shape — retired id, see Retired ids; id-135-adjacent). Evidence: reports/s436-okf-adjudications/s436-okf-storage-adjudication.md (migrated S507 out of canonical’s gitignored scratch — the S504 F1 lossy-provenance caveat no longer applies).