The KeelBase AI Governance Protocol in pure Java: canonical JSON, the audit hash chain, the delegation token, risk levels, governance binding, the confirmation lifecycle, and the frozen permission/authorization wire contracts. This is the artifact generated applications depend on, so it deliberately has no third-party runtime dependency — JDK crypto only.