Why: triage verdict NEW — the plan narrows role permissions to a single project-access boolean and replaces the linked-capability role model that the in-flight L1 #628 is delivering, so it ships as an independent initiative; the charter registers U1-U6 with the R13 gate split and the legacy-row normalization contract. Evidence: precheck READY receipt /tmp/access-lifecycle-precheck2.json; triage receipt /tmp/access-lifecycle-triage.json (verdict NEW). Impact: plan document (docs/superpowers/plans, host-exempt) and task card. Refs: plan 2026-10-19-1440; L1 #628 for the superseded model.