FIX7 Manifest And Engine Specifications

All qt001_cp authority objects owned by qt001_cp_owner NOLOGIN; Directus/PUBLIC no DML/DDL/control-writer execute. Common manifest_set has UUID/type/version/parent/lifecycle/expected count/payload SHA-256/canonicalizer/candidate epoch/validity/creator/seal/activation/supersession; exactly one ACTIVE/type; sealed/active/superseded immutable; no delete; rollback activates a new prior-payload version. Child rows bind manifest+item envelope, ordinal and item hash.

Critical Q_CRITICAL_3 exact classes: OPERATOR_MIGRATION, CODEX_REVIEWER, T2_HUMAN_REVIEWER. Standard Q_STANDARD_2 exact classes: OPERATOR_MIGRATION, CODEX_REVIEWER. Approval max 24h and exact hash/epoch/evidence bound. Activation locks epoch exclusive, validates exact quorum, atomically switches, increments epoch, keeps readiness false pending fresh verifier.

Exact child contracts exist for policy/operator/metric/unit/artifact/storage/principal/action/separation/readiness/hash/dependency/bypass/capability/measurement/artifact/signoff/tier/activation/quorum/authority-scope/privilege/dynamic-target/workload/analyzer/plan/gateway/writer. Generic engines have fixed signatures; no metadata-ID CASE/list. Missing/extra/NULL/unknown fails.