A registry accepts protected nanopublications only if it is configured as a local instance, and says so in its status. Publishing tools check this per registry: a protected nanopublication is sent only to registries that report themselves local, and if none is available, publishing fails with a message saying so rather than quietly falling back to the public network. Public query services likewise refuse to load them.