Security / privilege boundary

Protected path. Ordinary feature tasks may not edit this directory.

Core rule: stronger model/capability never implies more authority. External mutation credentials are restricted to Commit/Executor runtime or a narrower capability-specific executor.