Everything the engine understands, authorable by hand. Validation warns, never blocks — see the card contract.