the allocation is per matter, with a meta level and a constitutional floor

Maintainer decision, landed by the authority-module round. The thin allocation datum (Del, IsAmend, alloc, the reporting interface) is replaced by a per-matter allocation J (AuthorityModule.AuthAlloc): each matter's holder — the principal (reserved), the agent (delegated, within a stated scope) or a designated third party — the resolutions the holder must remain able to reach, the cost bound and the time window within which, and the disclosure duties that generate required reports. J has a meta-holder and a constitutional floor: delegation, revocation and reservation are meta-level acts that keep meta-level power, so a delegation stays revocable; alienation (a change of the meta-holder, e.g. approving an uncorrectable successor) and any change at the floor go only through amendment at the floor (Licensed, delegation_revocable, alienation_only_by_amend, floor_only_by_amend). Residual jurisdiction: an unallocated matter is reserved (ofPartial, residual_reserved). Matters are declared this round; J takes any type of matters so that raised matters (Part F of the round) can fill it. The landed datum is the special case (toAllocation, ofAllocation, toAllocation_ofAllocation_del), and every landed result restates on J without loss (violAt_ofAllocation). Agent-decided, reversible: the meta level as one meta-holder plus a floor set (a richer "who may change J" is not modelled); the disclosure duties as a separate Duties datum whose generation from disclosure(m) is declared. Rejected alternatives: keeping Del/IsAmend with per-matter fields bolted on; a single allocation-changing act with no floor.