- Search, sort, filters, and adjacent pages must return the D-11 envelope - Empty and single results keep an array and the requested page size - Unknown identifiers and injected values fail closed before unsafe SQL