Runtime declarations are data, not executable plugins. Fields, kinds, limits, references and revisions are validated before rendering. Only trusted build-time modules add Vue implementations to the compiled registry.

Hosts must resolve identity independently of browser input and authorize each read, invoke, subscription and receipt replay. A scope string is not a credential. Never publish unreadable values; Zixcel guards reject such snapshots.

Use private/no-store responses for authenticated data. Subscriptions stop on hidden/disposed views and do not overlap. A transport failure does not mean that a mutation did not execute: preserve exact retry references. Application handlers own atomic CAS, durable idempotency, grants and facts.

The independent fixture deliberately substitutes a test identity resolver. Never deploy its configuration operation or cookie-based identity stub as a product.