Product Manager 4.1.6

4.1.6

Correct retained-stage validation to distinguish platform grants from agent-provided execution
callbacks. The roster's EffectiveCapabilities contains granted platform operations; it does
not advertise work.execution.run. Exact available employee/installation bindings and
independent reviewers remain required. Typed planning and delivery finalization still recheck
the retained installation's current execution eligibility on the platform.

The delivery fixtures now reproduce the live roster shape. They verify faithful adoption and
preparation, rejection of changed principals, and refusal to mutate when the platform denies
current eligibility. No permissions, role changes, review waivers or deployment authority added.