Extension isolation and determinism requirements

Status: Draft stub.

Scope: permitted dependencies and reads, deterministic output, phase boundaries, and forbidden behavior.

To complete: cite exact requirements and gates, including the fact that apply, check, and rollback do not load extension code. Give verified accepted and rejected examples.