fix: stabilize canvas runtime and permission review (#3600)

docs/specs/canvases/README.md

@@ -4,7 +4,7 @@ owner: canvases
 specification_version: 1
 status: draft
 migration: complete
-last_updated: 2026-09-08
+last_updated: 2026-09-10
 ---
 
 # Canvases
@@ -20,15 +20,19 @@ remains authoritative for task data and permissions.
 ## Requirements
 
 - [Agent-authored web-app canvases](requirements/agent-authored-web-apps.md)
+- [Owner-authorized creation](requirements/local-creation-authority.md)
 - [Deprecated collaborative canvases](requirements/collaborative-canvases.md)
 
 ## System design
 
 - [Agent-authored web-app canvases](system-design/agent-authored-web-apps.md)
+- [Owner-authorized creation](system-design/local-creation-authority.md)
 - [Superseded collaborative canvases](system-design/collaborative-canvases.md)
 
 ## Related context
 
+- [Runtime and permission fix plan](../../plans/canvas-runtime-permission-fixes/plan.md)
+
 - [Agent MCP discovery guidance](../agents/system-design/mcp-tool-discovery-guidance.md)
 - [MCP discovery and canvas prompt plan](../../plans/mcp-discovery-canvas-prompts/plan.md)
 - [GitHub Copilot App Canvas reference](../../copilot-canvas-reference.md)