Bounds and redaction for decoded, untrusted startup data. Source validation belongs to the collector, under its owner/scope transaction.