- status/auth/actions derive from the bundled adapter registry (executable 15 -> 110)
- no oauth2 spec advertises an unresolvable example.invalid endpoint (104 -> 0)
- QuickBooks + Xero carry their real Intuit/Xero endpoints and real capabilities
- {connection.<field>} is a genuine tenant boundary, not shadowable by an argument
- a 409/412/429 reports on the envelope; currentState is the upstream body