Errors and retries¶
Fail closed on wrong-network identity, unresolved Registry identity, revoked/deprecated launch targets or malformed permission descriptors. Retry replaceable catalogue/network failures without inventing canonical metadata. Never convert missing evidence into a positive trust claim.