Trust Boundary

• standard source of truth: zhen-protocol-c2ai2x
• public runtime ingress: zhen-platform-core
• execution runtime: zhen-brain-core

AuthorizationGrant can describe intent, but it does not replace platform admission.

The stable public HTTP contract is the platform ingress at POST /api/execute. External callers integrate with that surface, not with zhen-brain-core.

Neutral protocol objects such as Demand and AuthorizationGrant still belong to zhen-protocol-c2ai2x; when they need to travel with a live execution request, they should be carried inside structured_input instead of being treated as the frozen top-level platform contract.