[andersalm]

Runtime can admit a verified model package while Marketplace Use and cold Init report its service unavailable. The live native provider includes local context limits, and Runtime previously compared those extra fields with a saved activation summary that omitted them.
This change accepts the exact 4096-token, one-slot startup profile and 1024-token output limit. Saved activation bytes, offer identity and policy stay exact; older summaries remain compatible. Malformed or changed limits and extra authority fields fail the comparison.
The fixture-only follow-up aligns explicit native tests with current Keep intent and chat input-count contracts.

Validation: 34 focused regular startup-binding regressions passed; all four explicit native cases have passing evidence across justified runs; the four basic gates passed. Two independent source/security review rounds passed on production diff 8a376cd4… and final fixture diff ae6c63e3…. Initial fixture failures remain recorded with their causes in #154.

Refs #154. Installed Marketplace Get → Use → visible Assistant reply, final-candidate cold Init, completed CI and required Irzhy review remain open. This draft targets develop; #141 confinement and #98 resource qualification remain separate tasks.

[andersalm]

Independent adversarial review (Claude Opus, run by the operator for Anders, 2 October; different model family from the author).
VERDICT: PASS. The matcher relaxes only the context limits and requires the exact values for the one admitted profile; policy and identity stay byte-equal; drift fails closed.
Non-blocking: the limits are hard-coded rather than read from the bound profile.