11 Public Directus Keyset Route

Verdict ROUTED_2_6B_NOT_BLOCKING. Keyset/resume/perf absence is visible and blocks readiness. Public/Directus authority is not structurally contained: PUBLIC Execute open=43, writer/builder open=4, Directus DML open=17; Directus owns writer/driver/builder/refresh and all control tables/views. It can replace enforcement or rewrite classifications/identity/evidence. DML no-go does not cover owner DDL authority. Same role can alter its constraint.