420 Arbitration architecture

Governance configures domain policy; the case registry binds parties/origin/policy snapshot/rounds; the ruling registry accepts exactly one ruling per round from the selected resolver; the originating protocol optionally consumes a finalized ruling through its own bounded transition.

Arbitration cannot directly seize funds, reverse Bridge transfers, rewrite Rights, slash validators, grant Wallet capabilities or override Governance.