Swift Customization

Keep provider, trusted actor and tenant, request policy, App Audit Sink, and optional telemetry in the application composition root. Generated queries and mutations receive only context. Do not add a second data-service argument or allow federation payloads to replace governance resources.

GeneratedRuntimeModule.module is a passive manifest. Install it during runtime assembly, but keep ensureSchema(GeneratedRuntimeModule.module.entities) as an explicit startup or administrative operation. Module installation, request handling, health checks, and telemetry setup must not alter the production schema implicitly.

RuntimeTelemetry is no-op by default. If OpenTelemetry is enabled, the application owns exporters, processors, flush, and shutdown. Telemetry failure must not change a business result, and sampling must never suppress the App Audit Sink.