HYBRID CORE 5.1.0-0924-02 — PRIVILEGE BOUNDARY RELEASE

Security invariants
- Hybrid Core is administrator-only at both menu and controller level.
- Non-admin staff cannot enter Core board editing, member functions, receiver, network, identity, workforce, recruiting, or other central management routes.
- A Board function such as can_edit never grants access to Core management.
- Public Secure Profile routes remain outside the admin route namespace.

Required role tests
1. Administrator: Core and Boards menus visible; Core management routes open.
2. Regular staff with assigned Board: only Boards workspace opens; Core URL returns Access Denied.
3. Regular staff with can_edit: Board actions can be edited; Board Management is absent; pasted Core URL returns Access Denied.
4. Regular staff without assigned Board: no Board records are returned.
5. Pasted hybrid_board_access and hybrid_identity admin URLs return Access Denied for every non-admin.
