Active Runtime Policy

• The current QiAccess Start runtime is single-user and operator-centered unless a page explicitly marks another model as future-state.
• Current access control should default to owner-scoped or protected system-scoped behavior, not assumed tenant scaffolding.
• Older multi-tenant language may be retained for history, but it must be labeled as future-state or quarantined.