ADR 0108 closed the policy set at four and priced a fifth: earned by a dependent that exists. The
registry's public door is one. A registry takes layers in single requests of gigabytes, the
predecessor served that name with a body-size middleware, and without one the proxy refuses the push
at its own default before the registry sees it — so a public name that cannot state its limit is a
public name nothing can be pushed to.
Rejects the cheap merge deliberately: the implementation waiting on feat/registry-public-route could
carry the limit beside certificate verification as a transport detail, but a body limit refuses
requests, and a closed set with an exception written next to it is not a closed set.