# Native action boundaries

Host callbacks and trusted financial outcomes are different evidence.

Version 0.1.0 · Early pilot · unreleased SDK · Reviewed 4 November 2026

## The host owns the action

Register the local handlers your app actually supports. The expanded service accepts at most 20 paywall IDs and 50 screen IDs per session, with revision checks. Operator cards carry an immutable snapshot targeted to the exact installation session. At tap time, the SDK requests a short-lived execution ticket before invoking its registered handler. Saved links must pass the owner’s HTTPS policy. No remote script, arbitrary executable URL or invented price is accepted.

## Implementation and activation

The native client registers real LobbyScreen and LobbyPaywall handlers through support.actions.register. Before a handler runs, an explicit tap must obtain a current-session ticket and confirm a requested receipt. Exact receipt envelopes and a durable execution-may-have-happened marker prevent automatic repeated execution after a crash or uncertain callback. A real authenticated hosted Inbox screen card opened Daylight’s actual reflection editor, with separate requested/opened records. Availability remains session-specific; absent capabilities stay unavailable. Merchant paywalls, review requests and external links need their own installation tests.

## Financial evidence

Client reports describe requested, opened, cancelled or failed interaction, not an entitlement, purchase or completed review. New explicit review cards use the canonical App Store review link pinned to the host’s own App Store ID. The separate host-owned StoreKit policy runs only after meaningful tasks and a local cooldown, never from a review button, onboarding, satisfaction survey or positive-sentiment gate. Apple controls prompt display. Saved immutable StoreKit cards retain requested-only receipts. Host-owned paywalls require real StoreKit products and a registered callback; an opened destination is not a purchase. Subscription-provider absence is unknown, never free.

- [Survey cards and moderated feedback](/docs/engagement)
