Module authority 

Authority evaluation: which commands are gated, and what the gate answers.

The contract’s precedence, in order:

1. an invariant or explicit prohibition → deny;
2. absent or risk-gated authority → page;
3. a matching unexpired scoped grant → allow.

Every result writes an immutable receipt in the same transaction. A page also raises a deduplicated unresolved attention item and does NOT mutate the target — it is a refusal that leaves a trail, not a queued write.