Native Shopify cart and checkout remain secured by Shopify. This protocol frames product intent; payment is never collected here.
