Expand description
Portable “open-in” / incoming-open contracts.
Incoming-open requests originate from the OS (file association open, share-target intents, etc.). The portable surface is token-based: runners keep privileged platform handles behind tokens and apps request bytes via effects in the runtime layer.