Refuse an entity outside its directory's namespace, including revocation targets (ruling 45) #146

Issue 3 of ledger/prd/namespace-independence-prd.md §6, opened on the principal's instruction (session ledger/sessions/2026-10-namespace-layout-authority.md).

Cites. PRD §3.7 (What crosses).

Size. S. Depends on. Issue 1.

Appendix C note. Yes.

Rulings carried. 45 (no file holds entities of two namespaces: every entity in ns/<ns>/ belongs to <ns>).

What it builds. A file-gate SCHEMA fault for an entity under ns/<ns>/ that belongs to another namespace: decision ids, the decisions that versions and acceptances name, the namespace fields of bindings and policies, a revocation's target, the grant of a grant acceptance or interval, the interval an availability ends, and a sidecar under a namespace other than its entity's. Closes N12's cross-namespace half (with ruling 49) and N14. Protocol: LP-3.33 loses its "Not implemented" mark and its italic note; Appendix B row; Appendix C note.

Acceptance criteria (§4.1).

• AC-45. A file under ns/A/ holding any entity of B is a schema fault, and so is a revocation naming an acceptance of B.