08 Control Plane Lockdown Audit

Verdict LOCKDOWN_FAIL_BYPASS_RISK. PUBLIC execute open=28, writer/builders=4, Directus DML=11. Writer consumes old gates; public refresh truncates/rebuilds snapshot; public builder supersedes/builds v2 plans; PUBLIC can trigger full scans/control mutations; Directus can alter authority/capabilities. Revocation is not safely routed until authoritative path is unified.