dominicrume/cantor8_kya_rails: docs/privacy-matrix.md

Privacy matrix Who signs each contract, who observes it, and who is excluded. The exclusions are the design: on Canton a non-observer receives nothing — not an encrypted payload, not a hash, zero bytes — so a party absent from a row cannot see that the contract exists. Generated from the Daml by…