Concepts

• Registry identity: canonical application/service identity and version.
• Catalogue metadata: rebuildable descriptions, screenshots, categories, reviews and ranking.
• Provenance: publisher, implementation and verification context.
• Wallet handoff: AppStore can launch, but Wallet remains the authorization boundary.
• Curation: a catalogue policy decision, not a protocol-state mutation.