Blast radius at Domain charter

This layer is deterministic-when-invoked.

Inherits tier taxonomy, defines which tiers the domain is authorized to operate, defines failure-mode reviews per tier.

Maps to