The public catalog is now separated from protected provider administration, giving commercial and technical teams a cleaner review path while settings remain controlled.
Current validation focuses on browser evidence, wallet callback behavior, and production Docker smoke checks before broader rollout.

