Sync Repo-docs-ACCESS-EXTRACTION-PLAN from project files

Repo-docs-ACCESS-EXTRACTION-PLAN.-.md

@@ -1,4 +1,4 @@
-<!-- codex-wiki-sync:1cf44edce1c7499eac1e8e1e -->
+<!-- codex-wiki-sync:270c19e5c534a991015f13f1 -->
 
 > Mirrored from `/mnt/DATA/git/govoplan-core/docs/ACCESS_EXTRACTION_PLAN.md`.
 > Origin: `repository`.
@@ -316,7 +316,7 @@ Acceptance criteria:
 
 - `govoplan-files`, `govoplan-mail`, and `govoplan-campaign` do not import
   access implementation modules or sibling feature modules.
-- Dependency-boundary allowlist shrinks after every replacement.
+- Dependency-boundary allowlist stays empty after each replacement.
 
 ### Stage 7: Remove Compatibility Debt
 
@@ -325,7 +325,7 @@ Finalize the split.
 Tasks:
 
 - Remove obsolete core compatibility aliases.
-- Remove remaining allowlist entries from the boundary checker.
+- Keep the dependency-boundary checker allowlist empty.
 - Update release dependency docs.
 - Update operator migration notes.
 - Add full module permutation tests including access-present and access-absent
@@ -382,6 +382,15 @@ Acceptance criteria:
 - [x] Move shared system-settings, tenant-governance, slug/error, and
   tenant-count helpers out of access internals into core settings/tenancy
   helpers used by the split platform route modules.
+- [x] Move campaign schema routes into the campaign route contribution.
+- [x] Move development mailbox routes into the mail route contribution.
+- [x] Replace core Celery direct campaign/mail imports with the
+  `campaigns.deliveryTasks` capability.
+- [x] Replace core retention direct campaign queries with
+  `campaigns.policyContext` and `campaigns.retention` capabilities.
+- [x] Replace core `create_all` feature-model imports with module registry
+  metadata discovery.
+- [x] Remove transitional boundary checker allowlist entries.
 - [ ] Move legacy admin service and model ownership out of the access
   compatibility implementation into access, tenancy, policy, audit, and core
   settings modules.
@@ -391,9 +400,10 @@ Acceptance criteria:
   - [x] `govoplan-files`
   - [x] `govoplan-mail`
   - [x] `govoplan-campaign`
-- [ ] Replace direct cross-module SQL lookups with provider/event contracts.
+- [x] Replace files/mail/campaign direct cross-module SQL lookups with
+  provider/capability contracts.
 - [ ] Move access admin WebUI pages to module route contributions.
-- [ ] Remove transitional boundary checker allowlist entries as each contract
+- [x] Remove transitional boundary checker allowlist entries as each contract
   lands.
 - [ ] Move campaign-scoped mail policy ownership fully behind an API/event
   workflow if direct synchronous capability calls become too tight for later