Made of little things.

# NIP-5D Reference

This repository does not contain normative protocol text.

Authoritative living source:

`https://github.com/nostr-protocol/nips/pull/2303`

## What To Use This For

- Confirm the JSON envelope shape for napplet-shell postMessage transport.
- Confirm iframe sandbox assumptions.
- Confirm how a runtime injects available NAP domains.
- Confirm that shell-mediated NAPs, not the napplet, hold privileged access.

## What Not To Do

- Do not copy protocol requirements into app code as hardcoded shell policy.
- Do not treat this template as the spec.
- Do not infer missing shell behavior from browser side effects.

When protocol behavior appears to conflict with a package README or NAP draft,
check the current NIP-5D PR head and the relevant living NAP text before using
the current `@napplet` package source as implementation evidence.