[TASK][PROGRAMME.T03] Freeze core contracts and process authority inventory

Parent: #1

Task ID: `PROGRAMME.T03`

## Implementation
Coordinate CORE-01/SEC-01 records, IPC roles, persistence ownership and threat boundaries before parallel teams implement incompatible variants. Assign one authoritative owner for grants, workspace state, external operations and evidence.

## Deliverable
Contract baseline and process/data ownership register.

## Verification
No two services independently own the same approval or transaction truth, and model/provider sessions remain secondary references.

## Guardrail
Version skew and unknown capabilities fail explicitly rather than being guessed by adapters.

## Prerequisites
- `PROGRAMME.T01`
- `PROGRAMME.T02`

Review: pending · Implementation: not started.

Start with parent #1 and prerequisites PROGRAMME.T01 and PROGRAMME.T02; review the CORE-01/SEC-01 records, IPC roles, persistence ownership, and threat boundaries described here. Done means a contract baseline and process/data ownership register exists, with one authoritative owner for each listed concern and explicit failures for version skew or unknown capabilities.

Written by the indexing model from the issue text.