ci/woodpecker/pr/ci Pipeline was successful
- §6.4 rollback witness now requires no state effect on rollback (create leaves no row; rename/transfer/visibility change leave prior values; delete/revoke leave the row present) alongside no event and no outbox record — all three REQ-AUD-001 legs; §6.9 cross-ref mirrors it. - §2.8 no longer authorizes a join-request runtime surface: the see-and-ask-to-join flow (Ruling 4b decision 5) is deferred in its entirety to its follow-up contract, with §2.8's invariants pre-binding it; A2 §9.2 gains the matching express exclusion (that contract must amend A2's enumeration before any join-request surface exists).