Domains every applet gets without asking: the handshake, in-shell messaging,
the theme and scoped storage. No network, and not the identity: which
account is signed in is the user's to reveal, so an applet learns it only
after the user grants "your account" (SOUL opinion 2).
Example
BASELINE_DOMAINS.includes('identity'); // false: the account is the user's to reveal capabilitiesForDomains(BASELINE_DOMAINS); // the capabilities granted without asking
Domains every applet gets without asking: the handshake, in-shell messaging, the theme and scoped storage. No network, and not the identity: which account is signed in is the user's to reveal, so an applet learns it only after the user grants "your account" (SOUL opinion 2).