CP11 Task 12 rulings — CP11-T12-1..7 (SupervisorGate takes the supervisee, HUMAN_ONLY on every supervisee read; the content gate takes the reader's rights and walks inheritance as DisclosurePolicy does; AI_RUN restricts; the supervisee list's restricted shape; review parameters and cardCount; DATE_UPDATED order; sealed bodies and row actions)