Attribution identity for cron maintenance — audit only. The sweep is TCB
code over the system store, so 'system' here is the reserved audit
identity (RESERVED_TENANT_IDS), which no verifier admits and no store
binds to; per-record tenants ride in the audit detail.
Attribution identity for cron maintenance — audit only. The sweep is TCB code over the system store, so 'system' here is the reserved audit identity (RESERVED_TENANT_IDS), which no verifier admits and no store binds to; per-record tenants ride in the audit detail.