Crosswake.
View Source
Signed-envelope payload after host verification.
The envelope intentionally carries only low-sensitivity locator and correlation claims. It cannot carry identity, credential, session, or authority-setting values.