A registry operator publishes metadata or trust assertions that relying parties consume under policy.
Registry operator -> publishes signed metadata -> relying party verifies -> policy evaluates -> trust decision -> bounded reliance effect