Bounded public identity mediation. The host supplies explicitly verified backend metadata bound to the fixed connection. No discovery probe occurs. The conservative extension allowlist depends on the available optional protocol adapters. The host must approve only capabilities of protocols it actually mounts and of its verified backend. Migration extensions require WebSockets; token issuance remains excluded.