Authority Model

The Control Plane is an authoritative writer.

It MAY

• Create and approve assets
• Modify user state
• Adjust entitlement flags
• Seed or backfill data
• Correct invalid state

It MUST NOT

• Silently violate domain invariants
• Write partial state
• Bypass auditing
• Perform hidden side effects

Rule

If logic lives in the Control Plane, it must be documented here.