Production/write authority remains CLOSED.
Use an STC role identity. Authentication uses OAuth Authorization Code + PKCE. The read plane remains read-only. Where explicitly commissioned, P7A permits only T000 Approved Action intake; it does not permit update, delete, completion, T002 writes or external effects.
Offline mode shows only the last successful non-secret controlled snapshot.
A zero count is a valid state and is not replaced with synthetic institutional records.