generated from coulomb/repo-seed
Fixes B-3/C-3. §9.1 structural per-tenant partitioning of the derived tier (no shared cross-tenant cache; read-time filtering as defence-in-depth; reconciles I-2+L5 per partition); new invariant I-13. §8.1 history stays recoverable AND bounded (gc/repack, squash-compaction of churn preserving recoverable endpoints, per-shard offload, anti-abuse hooks). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>