Production/write authority remains CLOSED.
Use an STC role identity. Authentication follows the active controlled runtime profile: protected shadow UAT or commissioned institutional sign-in. OAuth Authorization Code + PKCE remains the client protocol. No write authority exists.
Offline mode shows only the last successful non-secret controlled snapshot.
A zero count is a valid state and is not replaced with synthetic institutional records.