Memory BoundariesOperator-grade model for runtime memory claims, tenant isolation, and fail-closed memory authorization.