| Runtime route | Authority endpoint merged and protected by operator/service auth. |
| Tenant allowlist | AgenticOrg tenant explicitly allowlisted. |
| Source evidence | Shopify read-only sync evidence is redacted and timestamped. |
| Artifact issue/refuse | All 11 families issue for valid evidence; unsafe requests refuse. |
| Adapter mapping | Schema.org, UCP-style, ACP-style, AP2-style, A2A, MCP, and OpenAPI mappings derive from OACP artifacts. |
| Cache behavior | Valid cache can answer non-binding questions; stale cache blocks commitment. |
| Provider boundary | Plural/Pine capability evidence is provider-owned and redacted. |
| Rollback | Tenant removal and service-token rotation tested. |