sdg:BootstrapOperatorCopy as claim

sdg:BootstrapOperator is the operator-configured role that exists in registry code before any in-graph policy can be evaluated. It solves the chicken-and-egg problem of the publish pipeline: gate 1 evaluates publishes against published policy, but the very first PolicyDocument has to be published by someone. The bootstrap policy grants this role sdg:publish over any document.Copy as claim

This is a one-time enabler, not a standing bypass: once organisations publish their own PolicyDocuments, normal grants take over, and nothing exempts the operator from gate 2's non-overridable core invariants (version-graph immutability).Copy as claim