2026-10-25-config-environment-candidates
Source of truth
- Environment candidate inspection: ForgeTrust.AppSurface.Config adds names-only environment candidate plans for typed native keys, strict string keys, and direct composition paths. The inspector shares the host's frozen mapping snapshot and performs no source reads or value resolution. See the logical-key guide and packed consumer proof.
- Candidate inspection does not establish source presence, ownership, or complete aggregate policy. Applications retain those decisions and their inventory comparer.