@fabricorg/experience-gateway

Trusted server adapter between an experience runtime and Fabric Hosts. It verifies identity and scope through IdentityPort, resolves only server-held plan handles, routes reads through ProjectionHost, and submits mutations through PlatformHost.

Configure PlatformHost's composition.resolveInitiatingReleaseDigest with createInitiatingReleaseEvidence().resolve. Release evidence is held in an instance-scoped WeakMap and is never accepted from browser request data.

Provide actionVersion from the registered application module set so pinned release routes cannot silently invoke another action version. Actions governed at the capture authority moment additionally require a trusted captureAuthority adapter; the browser cannot manufacture an authorization binding.

Replacement gateways can run experienceGatewayChecks as a public compatibility suite.