fred
99a0c89c5a
ci/woodpecker/pr/ci Pipeline was canceled
Existence disclosure stated as a bounded carve-out to hierarchy schema §6.7/§2.8 instead of denied (§8.1); platform_capabilities fully pinned (uuid PK, timestamptz, both user FKs ON DELETE RESTRICT mirroring contract 1 §3.3, column-set exhaustiveness) (§8.2); assignment rides the normal admin command surface, sole writer (§8.3); disjunct-independent fail-closed evaluation and capability deletion added to §6.1's revocation enumeration (§8.4); §8.6 rewritten as a capability-only command matrix with disclosure-bound, both-polarity assignment, and per-transport revocation witnesses.