Resolve a trusted creation identity's immutable NAP-SHELL environment.
This host-adapter API is intentionally not part of window.napplet: it bounds host policy to current runtime wiring before shell.init crosses into an untrusted iframe.
window.napplet
shell.init
Shell host wiring and optional per-identity grant policy.
The source's creation-time identity.
A fresh immutable environment whose entries are exact live subsets.
Resolve a trusted creation identity's immutable NAP-SHELL environment.
This host-adapter API is intentionally not part of
window.napplet: it bounds host policy to current runtime wiring beforeshell.initcrosses into an untrusted iframe.