Always preserve the central dual-surface model, four-way cryptographic separation, recursive delegation, Owner visibility, and component-limited blast radius.