An allowlist in api/remotes drives verbatim forwarding of Host cordis events that bind no AgentScope, wrapped in one host/remote-event frame on the existing host stream. Consumers subscribe through ctx.remote.$on, whose listener type is the owner package's own Events declaration, so the payload contract holds by construction rather than through a restated table.