Trusted in-process code with no caller and no scope.
A query that states nothing: in-process unless the entry policy requires explicit entries.
A plain caller: caller's identity on entry, in its own tenant and scope, naming no other scope and no other tenant. An edge that lets a caller name them builds it through QueryTargets.of instead.