Trusted host binding for a direct library call. This is not authentication.
The host verifies identity, authorizes the operation and supplies a fast,
local ready? callback. Every call checks readiness before opening a backend.
owner must match the connection owner. private_state and capabilities
are host-owned references; the library neither creates nor invokes them.
A context must never be constructed from untrusted agent request parameters.