FIX7 Final Review - Design Corrections

Corrections: generic typed fact/policy interpreter; normalized capability measurements; manifest/FK principal/action/tier contracts; independent activation quorum; manifest-driven hash/no-bypass vectors; deterministic authority scope; analyzer contract and manifest-bounded dynamic SQL; content-addressed evidence read-back; zero direct runtime DML; Level-B DOT pipeline; no caller PASS; control-epoch serialization; typed read-only fact adapters/operator primitives. No unresolved design choice is delegated to T1.