{
  "schemaVersion": 1,
  "package": "@open-matrix/browser-host",
  "layer": "browser-host",
  "owns": [
    "browser runtime bootstrap consumption",
    "MatrixAuthorityContext installation into browser runtime context",
    "runtimeInstanceRoot propagation"
  ],
  "doesNotOwn": [
    "auth decisions",
    "namespace ownership",
    "Registry storage",
    "provider binding resolution"
  ],
  "providedActorSurfaces": [
    {
      "subjectPattern": "<runtimeInstanceRoot>.<browser-app-mount>.$inbox",
      "placement": "browser-runtime",
      "ops": [
        "$introspect",
        "$prompt"
      ]
    }
  ],
  "requiredActorSurfaces": [
    {
      "subjectPattern": "SPACE-HIVECAST.system.gateway.http",
      "rootSource": "asset host HTTP bootstrap",
      "ops": [
        "/api/bootstrap"
      ]
    }
  ],
  "configuration": {
    "sources": [
      "/api/bootstrap authorityContext"
    ],
    "forbiddenSources": [
      "DOM authority-root",
      "runtime.root",
      "assetHostRoot"
    ]
  },
  "persistence": {
    "owns": [
      "none"
    ],
    "reads": [
      "bootstrap response only"
    ]
  },
  "security": {
    "mustAllow": [
      "browser session bootstrap credentials for authorized selectable roots"
    ],
    "mustDeny": [
      "browser-side recomputation of authority roots"
    ]
  },
  "proofGates": [
    "guard:control-surface-contracts",
    "pnpm test:focused @open-matrix/browser-host"
  ]
}