Crosswake.
View Source
Shared outer auth-return envelope.
The envelope carries route-local binding and validation posture. Nested evidence carries protocol-specific facts. Neither can grant authority.