Durable discovery and bounded attention work. The directory is a hint, not
cognitive truth or execution authority. One live host owns each storage shard.
Credentialed product access to durable attention and independent observations.
Installation is a trusted host capability; ordinary API bodies cannot grant it.