chore: finalize integrated release baseline

.project-docs/40-domain/glossary.md

@@ -10,4 +10,7 @@
 | Program-only | Route must use the deterministic parser and may not fall back to AI | Applies to both passenger-list routes |
 | fresh requery | Read-only ERP verification performed after an action | Required except where an action-specific explicit-success credential is accepted |
 | no ERP write | Evidence-backed result that the write boundary was not crossed | Must not be inferred from an unknown post-submit failure |
+| management plane | Account, channel, parser-routing, automation-setting, and audit administration available to `admin` | Excludes every business-task API, dashboard, browser worker, and task principal |
+| task data plane | Business-task creation, reads, inputs, lifecycle mutations, events, browser execution, results, artifacts, and deletion | Available only to `team_lead`/`user`; normal operations require immutable ownership |
+| immutable assignee | The durable `assigned_user_id` that owns task execution and employee attribution | Drives owner-only operations, per-account FIFO, and the cross-source team-lead dashboard |
 | Promotion Candidate | Task-scoped proposal for durable canonical memory | Accepted only through Integration Gate |