Read-only status projection. Writes intentionally do not exist: cancellation belongs to the donor, and the partner channel stays out of the consent chain.