Role-policy consumers must share the canonical fallback
Reusable review finding: a secondary eligibility query that reads only `load_scope` and applies a generic role fallback can diverge from the canonical whole-policy resolver. In Shield PR #793 / COR-3971, a missing or invalid Admin policy row resolves to `own` in load-assignee eli…