Opening an App page or form no longer refreshes the whole App menu merely because the surface mounted. Later authority changes still refresh navigation. Identical concurrent bootstrap requests share one in-flight response for the same tenant, actor, session and scope; subsequent reads reauthorize normally, and each surface validates its own route or declaration.

App bootstrap reuses runtime selection within its read-only response calculation. Runtime navigation and published frontend-grant creation avoid redundant checks within the same read-only calculation. Organization-target and legal-entity applicability lookups reuse the already authorized catalog while preserving actor and organization checks. Platform callbacks inspect their owning App instead of unrelated Apps. Every asset request still checks live execution and actor authority.

These changes apply to the shared Core App execution paths. Deploy Core only; no SDK update, App republication or database change is required. Developers acceptance and Production promotion remain separate.