Capability, query, and stream contracts exposed to an app-delivered UI
stage. This is intentionally separate from the app’s backend dependency
declaration (requires / capabilities.requires): backend providers may
need capabilities that must never be delegated to browser UI code.
Runtime resource requests (Contract C2). memory_mb becomes the Burger
host’s per-app QuickJS memory limit (load_app.memory_limit_mb);
callback_deadline_ms becomes its per-callback CPU watchdog
(load_app.callback_deadline_ms). Both are omitted from load_app when
absent so the Burger host applies its own defaults (32 MB, 5000 ms).
TCP port preferences for standalone apps that bind their own port.
Consumed by the port registry (system/server/src/services/port_registry/)
at install time.
Declared responsiveness expectation for an app’s lease engine decisions
(app lease engine design §8, Task 1). None on GovernorManifest means
the app has not declared a preference — the lease engine (Task 5) then
falls back to its own default rather than treating an unset field as
either variant.