Domain setup

Porkbun first-class path, BYO fallback, record import

Records

Visible records, protected platform records, integration-owned records

Safety

Passkey plus OTP, propagation, rollback, transfer-out warnings