Deterministic clock-driven revocation queue with mock + production clock bindings.
Scan the product manifest — ontology types, functions, actions, policies, and dataset shells.