Session actor

Load partner + governance

Response includes governance.commercial (read-only policy summary) and governance.federation (operator posture). Mutations require platform_admin or tenant_admin; optional mutation_reason on PUT is audited (ADR-037).

— federation summary and IdP boundary