Read-only: tier definitions are demo configuration managed through seed/migration. Threshold editing ships with RBAC, impact preview and audit safeguards (TD-21).