DL-376

A user-secret row’s declared_by is provenance only (the account that first declared the row; a rewrite keeps it); it carries no authorization weight, and write/delete authority stays with the DL-363/DL-370 scope rules at the RPC edge

Status: Active (Matt, 2026-09-25)