Workflow origin for the DocuSign envelope closure loop. It reads one template and its recipient roles for context, creates either a draft or sent envelope through recued-core.docusign.envelope.create_from_template, and when the owner sends an envelope it seeds durable data.shared closure state for docusign-envelope-closure-watcher plus a link from envelope to template. It does not expose binary uploads, recipient signing URLs, bulk send execution, correction URLs, deletes, purges, reminders, Connect/webhook administration, or arbitrary endpoint passthrough.

Scheduled adopter for DocuSign envelope closure rows seeded by send-docusign-template-envelope-with-closure. It lists only Recued-originated envelope watches, re-reads a bounded batch of envelope from DocuSign, and closes the shared row when DocuSign reports a terminal status. It can notify the owner on completion or exception status, but it never sends reminders, voids envelopes, changes recipients, downloads documents, creates Connect/webhook settings, or calls arbitrary DocuSign endpoints.

Read-only evidence brief for one DocuSign envelope. It reads envelope metadata, recipients, document metadata, audit events, and captured form data, then renders tables for review. It never downloads document binaries, signature images, or recipient ceremony URLs and does not mutate the envelope.

Low-frequency timeout role for recued-core/docusign-envelope-closure. It moves a bounded batch of expired rows from active to timed_out, deletes the active copy only after the durable timeout write succeeds, and notifies the owner once per batch.

Owner-visible list/close role for recued-core/docusign-envelope-closure. It lists bounded active, timed-out, and closed rows. Supplying a timed-out or closed key deletes only that exact terminal row; active watches cannot be deleted here.