The per-invocation context threaded through every pipeline step.
actor— required, from opts; opaque to Enact (struct, scope, or:anonymous) — only the host app'sauthorize/1and fetchers read itsubject— filled by the load step: the updated record (patch mode) or the parent anchor (create-under-parent)params— caller params after key stringification (values still raw), kept for presence checks (Enact.provided?/2) and auditrepo— the injected repo modulemode—:createor:patch, from the action'sconfig/0assigns— caller-passed metadata merged with resolver-stashed references (resolver keys win on collision)