PASS: Additive sharing tables and access audit are migrated
PASS: Sensitive categories are not migration enabled
PASS: Contract requires Unit permission, Province feature, capability and expiry
PASS: Contract writes purpose and source workspace audit rows
PASS: Province Unit view uses events and attendance sharing separately
PASS: Province aggregate membership is unavailable without explicit sharing
PASS: Unit has a server-authorised transparency and revocation endpoint
PASS: Province return exports receive a fresh category check
PASS: Migration manifest records the new schema