Responsibilities

Shared privacy boundaries, typed policies and source-backed sector requirements. The registry starts denied and is keyed by shop and sales channel. Only server-validated, current receipts unlock optional services; LocalizedField remains the content-editing contract. ExternalVideo prevents remote video loading before consent.

Regression coverage: frontend/tests/unit/legal-privacy.test.tsx and scripts/legal_privacy.py; connected provider tests in scripts/email_tests.py. See docs/european-operation.md for legal sources, configuration and proof limits.