Per-event filter. Exported because it is the security-critical gate and must be testable in isolation.
An event reaches a subscriber only when BOTH hold:
Fails closed: a missing connection identity, a missing owner on the event, or a missing argument never matches.
Per-event filter. Exported because it is the security-critical gate and must be testable in isolation.
An event reaches a subscriber only when BOTH hold:
Fails closed: a missing connection identity, a missing owner on the event, or a missing argument never matches.