docs: re-key architecture docs off the alknet mono-repo — speak as alkcall

The ported docs still framed alknet siblings (alknet-core/-call/-channels/
-http/-tls/-client) as live load-bearing context of this crate. With the
extraction complete and alknet headed for glue-level replacement, the docs
now speak as alkcall and cite the real sibling crates (alkhttp, alktls,
alktty, alktunnels, alktrader).

- ADR-054 (new): re-own the verifier-selection rule in-crate — three
  remote roles (public X.509 endpoint / transport relay / hub),
  ServerCertVerifier by PeerEntry presence, RemoteIdentity None
  load-bearing. Provenance: alknet ADR-034 (never ported), demoted to
  footnote. Resolves OQ-21's cross-repo authority gap.
- OQ-43 (new, deferred(scope)): composition-layer ownership and shape
  after the alknet replacement — the named receiver for the
  downstream-side deferrals (OQ-33 endpoint layer, OQ-41 QUIC-native
  substrate, OQ-42 hub broker, OQ-19 persistence adapters, ADR-045 dial
  seam). README layering diagram redrawn with the composition layer as
  TBD-ownership instead of "alknet / alknode" in concrete.
- Spec docs reframed: titles, self-references, dial/TLS/from_jsonschema
  homes, malformed legacy cite rows removed; dead relative research
  paths qualified as source-repo paths.
- ADR amendments (append-only): 027 (alknet-http -> alkhttp), 031 (post-
  extraction state), 044 (split landed as modules in alkcall), 045
  (name normalization; citation-space note).
- Citation hygiene: unprefixed/colliding source-repo cites prefixed
  ("alknet ADR-NNN (provenance)") across 009/011/022/034/035/038/040/
  043/044/045; stale OQ cites corrected (session registries OQ-04, batch
  semantics OQ-03, verifier rule ADR-054); stale anchors fixed.
- README provenance note consolidated; citation conventions documented.

Verification: markdown link check (all local links resolve, all in-crate
ADR cites point at existing decisions/ files); table integrity check
(uniform row widths across open-questions.md and edited tables); residual
alknet-mention sweep (only provenance/historical/intentional framing
remains); architecture review subagent pass with zero remaining criticals.
Docs-only change — no code paths touched.

docs/architecture/channel-client.md

@@ -1,6 +1,6 @@
 ---
 status: draft
-last_updated: 2026-07-18
+last_updated: 2026-10-13 (alkcall reframing)
 ---
 
 # channel-client.md — ChannelClient
@@ -152,17 +152,19 @@ takes over channels establishment. The transport is the caller's concern:
 `Connection::from_bidi(tls_stream, ...)` for TCP+TLS, a quinn `Connection`,
 a WebTransport `BiStream`, an SSH `direct-tcpip` channel wrapped via
 `from_bidi`, a WebSocket carrying `alk/channels` (the browser path per
-ADR-044) — all produce a `Connection` that `from_connection` accepts
+alknet ADR-044 — websocket-native session, provenance) — all produce a `Connection` that `from_connection` accepts
 unchanged. This mirrors the server side's `ChannelsAdapter::handle(Connection)`, which is substrate-agnostic by the same mechanism.
 
-The dial (QUIC, TCP+TLS, iroh) lives in `AlknetClient` (`alknet-client`,
+The dial (QUIC, TCP+TLS, iroh) lives in the composition layer's dial
+helper, `AlknetClient` (today in the alknet glue; future owner OQ-43 —
 ADR-045), not on `ChannelClient`. Callers compose
 `AlknetClient::dial_quic(...).await?` + `ChannelClient::from_connection(conn).await?`
 — two lines, the dial then the take-over. Keeping the dial off
-`ChannelClient` avoids `alknet-channels-call` depending on `alknet-client`;
+`ChannelClient` avoids alkcall depending on a dial crate;
 the protocol crates are parallel to the dial, not downstream of it.
 
-The credential/verifier-selection rule (ADR-034) lives in the dial
+The credential/verifier-selection rule (ADR-054, re-owned from the
+source repo's alknet ADR-034) lives in the dial
 (`AlknetClient`), not in `from_connection` — `from_connection` receives
 an already-established, already-authenticated `Connection`, exactly as
 `ChannelsAdapter::handle` does on the server side.
@@ -181,12 +183,13 @@ connect side's channel 0 (if the connect side registers any).
 name follows the `CallClient` convention (the side that dialed), not a
 request/response role.
 
-## Relationship to `AlknetClient`
+## Relationship to the composition layer's dial helper
 
 `ChannelClient`'s *API* is transport-agnostic — `from_connection` takes a
-pre-established `Connection`. The shared *dial+TLS* seam
-(`AlknetClient`, alknet OQ-55) is [`alknet-client`](/workspace/@alkdev/alknet/docs/architecture/crates/client/README.md), which
-provides `AlknetClient` with three dial methods (`dial_quic` /
+pre-established `Connection`. The shared *dial+TLS* seam is the
+composition layer's dial helper, `AlknetClient` (ADR-045; today in the
+alknet glue, future owner OQ-43), which
+provides three dial methods (`dial_quic` /
 `dial_tcp_tls` / `dial_iroh`), each producing a `Connection` that
 `from_connection` consumes. The dial is transport-specific (QUIC,
 TCP+TLS, iroh); the take-over (`from_connection`) is
@@ -194,10 +197,9 @@ transport-agnostic. The two concerns are separated.
 
 `AlknetClient::dial_quic` is the dial that feeds `from_connection`. A
 caller that needs transport selection (QUIC with TCP+TLS fallback) uses
-`AlknetClient` directly; the fallback policy is a caller concern. See
+the dial helper directly; the fallback policy is a caller concern. See
 [ADR-045](decisions/045-alknetclient-native-dial-seam.md) for the
-full decision and [OQ-55](/workspace/@alkdev/alknet/docs/architecture/questions/055-alknetclient-establishment-extraction.md)
-(resolved).
+full decision.
 
 ## Design Decisions
 
@@ -205,15 +207,15 @@ All design decisions are documented as ADRs in [decisions/](decisions/).
 
 | ADR | Decision | Summary |
 |-----|----------|---------|
-| [043](decisions/043-channelclient.md) | ChannelClient | Client side; transport-agnostic `from_connection` primary; dial lives in `AlknetClient` (ADR-045, resolves OQ-55) |
+| [043](decisions/043-channelclient.md) | ChannelClient | Client side; transport-agnostic `from_connection` primary; dial lives in the composition layer's dial helper (ADR-045) |
 | [035](decisions/035-channels-pure-channel-multiplexing.md) | channels Pure Channel Multiplexing | No `stream_types` on `open_channel`/`Channel`; handler owns sub-stream multiplexing |
 
 ## Open Questions
 
-- **alknet OQ-55** (resolved by ADR-045): `AlknetClient` core **dial+TLS seam**
-  — `alknet-client` with three dial methods. `ChannelClient`'s API is
-  transport-agnostic (`from_connection`); the dial is the shared seam.
-  See [ADR-045](decisions/045-alknetclient-native-dial-seam.md).
+- **Dial seam ownership** (ADR-045): the dial helper (`AlknetClient`)
+  lives in the composition layer today; its post-alknet owner and shape
+  is OQ-43. `ChannelClient`'s API is transport-agnostic
+  (`from_connection`); the dial is the shared seam.
 
 ## References
 
@@ -225,6 +227,6 @@ All design decisions are documented as ADRs in [decisions/](decisions/).
 - ADR-039: ChannelManager (the shared state `ChannelClient` holds)
 - ADR-047: openable ALPNs are operations (per-ALPN open ops dissolve
   the generic `channel/open`)
-- alknet OQ-55: AlknetClient / client establishment extraction
-- `docs/architecture/crates/call/client-and-adapters.md` — `CallClient` (the
+- ADR-045: the dial seam (dial out of the protocol crate)
+- [client-and-adapters.md](client-and-adapters.md) — `CallClient` (the
   shape `ChannelClient` mirrors)