Sealed services supplied only when active provider runtime is opened.

Construction is process-free and invokes no resolver or context factory. Activation may start one private host authority, and OAuth context creation remains lazy until a selected catalog requires it. The context factory receives the registry's absolute operation deadline and must pass it through unchanged rather than creating a fresh budget. It runs in a worker bounded by that deadline, so it must return a value rather than retain process identity; activation cannot be bounded the same way because the authority it returns is owned by whichever process created it. Provider application mode declares whether selected optional applications must be host-started or may be started by a command-owned VM. An opaque keyed binding prevents host services from opening a catalog built from a different host document without exposing credential declarations.