Why: project business policy must be distinct from account and per-project private preferences. Evidence: existing Core contract suite passed (SELF); consumer generation and exact combination checks remain pending. Impact: additive settings scope vocabulary; omitted scope retains personal compatibility. Refs: approved settings increment P1/P2; Dev feature/rdm-settings-completion