Declared principles for incident communication, backup, vulnerability handling, accessibility, ownership, and contract-stage measurement without live uptime claims.