Shared subtree rules

Public schema or type changes require migration analysis and focused compatibility tests.
Ordinary loading remains read-only unless an accepted architecture decision explicitly says otherwise.
Update accepted ADRs and canonical docs at the slice boundary.
A shared type change invalidates dependents according to the verification matrix; it does not automatically require packaging in the fast loop.