The public layer is deliberately narrow: it exposes protocols, manifests, bounded evidence, negative results, public demos, and repair routes. It does not expose private financial execution details, customer data, internal agent orchestration, commercial schedulers, API keys, or anonymous conference packages.
If a critic can show a stronger baseline, a leakage path, a failed reproduction command, or an over-broad boundary, the claim should be narrowed or repaired. That is the point of the registry.