A connection binds one vendor, one customer relationship, one environment, and its installation identity. It is not a shared customer workspace and it never gives the vendor customer authority.
The vendor created the relationship; the customer has not accepted it.
The customer accepted the scope and is installing its signed Gateway package.
The installation identity is enrolled and compatible profiles can be activated.
The relationship needs review because identity, compatibility, health, or authority changed.
The relationship or installation can no longer receive governed requests.
Lifecycle changes are authenticated, scoped, and written to immutable connection events. A vendor can observe status but cannot manufacture customer acceptance.