Records why the provision trigger (domain + BFF + portal 'Documenten aanleveren') lives in S-10a — the WachtOpDocumenten gate would otherwise leave the e2e red — and narrows S-10b to the real ZGW document storage. Notes the withdrawal-while-waiting follow-up. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>