# Adoption limits

Reviewable draft, metadata only. No authentication, IAM/grant evaluation, policy precedence, real source resolution, source-value projection, transformation, inference detection, privacy budget, recipient delivery, disposal engine, legal conclusion or standards conformance. A manual cleared verdict is an attributed opinion under exact context, never a privacy proof or serving authorization.

The host supplies authentic actors and object-specific write authority, an independently resolved complete current snapshot, correct clock, complete local register, active/withdrawn history, actual distinct-person mapping, storage transactions and access/custody controls. All diagnostics are restricted; metadata and free-text notes may themselves be sensitive. The host must deactivate transitive superseded ancestors. Every verdict expires; persistent objections require another profile. Structural bounds are not enterprise-scale or hostile-input performance evidence.

Native acceptance uses three new synthetic Dimensions and explicit companion validation. It does not prove automatic engine invocation, production storage correctness, real organizational governance or existing-Dimension conversion. Source/parent research holds remain in crosswalk.json. The broader classification, serving and retention contour stays partially covered.

The semantic question tree describes agent/host answer states. “Denied” means the host must refuse the action; the reference raises Unauthorized rather than returning a denied status. DR-ACT06/DR-ACT21 insufficient-context requirements concern host classification-comparability/custody evaluation, not inspect() computations. inspect() can return applicable-review while a custody hold is unresolved, because it compares only the opaque supplied pins. The host must perform those separate checks before serving. Native storage objects stay active even after snapshot withdrawal. At-rest append-only/CAS and independent prior digest anchors are host responsibilities.