Connections

Connected accounts expose capabilities — but a connection is not authority. Every protected capability still passes through EHIP.