RP-08 - Directus Read Contract

Status: RESOLVED_ADVISORY

The ACTIVE Directus SELECT subset in privilege_set_manifest #21 is the sealed read contract. Applicable rows bind query family, endpoint group, business object, observation source, smoke pattern hash, and observation_max_age_seconds.

Observed emitted reads and expected sealed rows compare in both EXCEPT directions:

• observed but not expected: BLOCKED_READ_PATH;
• expected but not observed: incomplete observation, operator required, readiness blocked;
• stale observation using sealed max age: operator required, readiness blocked.

No fixed observation-window literal exists. Directus retains only exact manifest-listed business base-table/view SELECT and receives no control-plane authority.