Permission migration: Enforcement architecture

Defines a staged migration from one permission model to another using shadow evaluation, divergence evidence, explicit cutover cohorts, rollback, and fail-closed enforcement boundaries.

Published Sep 12, 2026