Administrative Control Plane

A single, fail-closed evaluation path for every administrative request. Scope is derived from verified identity membership; each decision is bound to a correlation id and recorded to the tamper-evident audit trail.