// Package layoutroutingidentitymappingv1 defines the canonical, complete
// Profile/Role key-to-local-ID mapping payload used as input to a future
// stopped migration.
//
// A proposal is deliberately not proof that any key may be used. The Tenant
// path must bind its bytes to the Core identity/permission migration
// administrator's authenticated, reviewed decision; the SYSTEM path must bind
// them to a trusted system-release manifest. App declarations, namespace
// ownership, source authorization, signature verification, policy decisions,
// command identity, durable ledger writes, identity state, role topology,
// SecurityEpoch, and serving are all outside this package.
//
// The proposal includes only the complete per-org typed key/local-ID bijection.
// Its consumer must separately prove that it covers the exact live
// Profile/UserRole rows under the owning writer fence, and must derive role
// topology from that same transactional state rather than accepting it from
// this payload.
package layoutroutingidentitymappingv1