CUST-WP-0075: NK-WP-0045 custody-record schema and validator; NK-WP-0042 reply

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 3775@bnt-lap001
Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3

tools/custody-record/fixtures/invalid/tenant-admin-implication.json

@@ -0,0 +1,40 @@
+{
+  "schema_version": "0.1",
+  "kind": "netkingdom-custody-record",
+  "record_id": "nk-custody:platform-root",
+  "revision": 1,
+  "updated_at": "2026-10-01T09:00:00Z",
+  "owner_system": "net-kingdom-custody",
+  "freshness": {
+    "max_cache_seconds": 900,
+    "on_unreadable": "no-grant"
+  },
+  "entries": [
+    {
+      "entry_id": "king-1",
+      "subject": {
+        "issuer": "https://kc.coulomb.social/realms/netkingdom",
+        "subject": "00000000-0000-4000-8000-000000000001"
+      },
+      "grant": {
+        "scope_type": "tenant",
+        "scope_id": "platform",
+        "relation": "tenant-admin",
+        "owner_system": "net-kingdom-custody"
+      },
+      "evidence": {
+        "basis": "tenant-admin",
+        "ref": "tenant:platform admin role"
+      },
+      "granted": {
+        "at": "2026-10-01T09:00:00Z",
+        "actor": {
+          "issuer": "https://kc.coulomb.social/realms/netkingdom",
+          "subject": "00000000-0000-4000-8000-000000000009"
+        },
+        "reason": "King credential assigned at custody ceremony",
+        "revision": 1
+      }
+    }
+  ]
+}