D3: catalog, docs, tests and SDD hashes preserve the authorization boundary.
