Applies Jason's three rulings of 2026-11-10. Named rights, role bundles and per-member grants replace the fixed owner and member split. A member holds org.view, thread.read and board.read by default. decide and task.write are grantable. The rights table lands first as slice M1.