Every browser boots /platform, and studios state their boundary honestly.

The unsealed federation registry renders at its true boundary with an explicit badge — fresh browsers no longer fail closed on a document that was never signed.
Studio pages probe the hosted remote and show a coming-soon notice linking the verified public source repository.
Only studios with sealed evidence are listed as live.
The scheduled health-check workflow file was invalid and never ran on push; fixed and verified by a live dispatch.