- expose bounded read-only profile facts for shared records\n- keep profile navigation separate from Settings mutations