Tensor privacy, trust tiers and retention

Intermediate representations are tenant-confidential and task-scoped. They stay inside an operator-approved trust tier; community nodes receive only the existing text/structured boundary. Frames bind account, task, cohort, revision, edge and physical leases and use authenticated framing inside TLS 1.3 mTLS across hosts.

Host staging uses bounded slots, generations, TTL, acknowledgement and best-effort zeroization. A content-free WAL stores only IDs, hashes, event types and aggregate byte counts needed for recovery. Prometheus labels exclude tenant/task/cohort/model, and public events exclude transport addresses, keys and memory handles.

The prompt/completion retention policy remains the existing account policy; Cohort does not create a second content-retention path. Fabric health fails closed when the WAL/reaper/listener is unhealthy.