docs: require direct-main authorization evidence

CHANGELOG.md

@@ -422,7 +422,8 @@ Applied, Rejected, Obstructed}` with receipt evidence and typed contract
   docs-only direct-main exception for the Echo graph model checkpoint, including
   authorization context, exact commits, validation, changed files, and the
   future rule to prefer PRs unless an emergency or docs-only fast path is
-  explicitly authorized.
+  explicitly authorized. Future exception records must also cite explicit
+  authorizer identity and authorization evidence.
 - `docs/design/built-in-echo-graph-data-model.md` defines Echo's native
   graph ontology for future optic admission, authority, transaction atomicity,
   receipts, witnessed readings, footprint addressing, transaction-local object

docs/procedures/DIRECT-MAIN-EXCEPTION-LOG.md

@@ -76,6 +76,9 @@ a maintainer.
 Even for docs-only direct pushes:
 
 - state the exception before pushing;
+- record the explicit authorizer identity and authorization evidence, such as a
+  link or citation to the issue, PR comment, thread, or chat log where the
+  exception was approved;
 - run the relevant docs validation;
 - record exact commits and changed files;
 - confirm no source/runtime code was touched;