[nomed]

Summary

Starts #89 under #87/#88 on pinned Cognee 690c0ec023719a2a277dc893cdecfec1ca8012cc.

This PR freezes only the public seam contract before paying the cost of a bounded executable Cognee stack.

Evidence-backed candidate seam

The pin exposes public auth registration/login/API-key flows and a provider-native dataset ACL model. Public permission routes include explicit grant and revoke on a principal + dataset, with permissions read, write, delete, share; the permission model includes User/Role/Tenant principals and share gates grant/revoke.

The preflight also freezes two limitations that must survive into the executable decision:

• protected granularity is dataset/collection, not individual memory atom;
• denied search intentionally returns an empty result rather than 403, so the executable gate must independently prove M contains retrievable content before treating B's empty result as denial.

A green run means only EXECUTABLE_CANDIDATE; it is not yet COMPLEMENT_PASS.

Next slice remains the normalized #89 gate: A owns M → B denied → explicit grant → fresh B reads → explicit revoke while A/B/M remain alive → fresh B denied → restart → enforcement persists.

Related: #63, #77, #87, #88, #89, #86.

[nomed]

PASS — READY TO MERGE. The preflight is narrow and falsifiable, pins the candidate revision, freezes the public auth + dataset ACL grant/revoke seams, and explicitly preserves the two critical limitations: dataset-level granularity and denied-search-as-empty semantics. No blocker found; this correctly authorizes the bounded executable gate without implying COMPLEMENT_PASS.