Errors and retries

Fail closed on wrong-network identity, unresolved Registry identity, revoked/deprecated launch targets or malformed permission descriptors. Retry replaceable catalogue/network failures without inventing canonical metadata. Never convert missing evidence into a positive trust claim.