- ADR-055: `set_identity` once-only is contract; no post-construction
identity seam will be added (a mutable setter under the N-auth
shared-handle case is last-writer-wins and would make
`AccessControl::check` flap)
- ruling: dial-after-auth (one fabric connection per authentication,
identity set before wrapping) is the norm composition for per-auth
doors; pre-dialed shared connections contract dial-time substrate
identity with per-session gates as the door's job
- scopes the payload `auth_token` path to its carve-out (alkhttp, git
LFS); native consumers present key identity at establishment
- review 014 resolved with the disposition correcting the framing:
fact (a) reclassified as not-a-defect, fact (b) ruled; `take_call_connection`
detach stays intentional
- README ADR index + AGENTS.md range/list updated; no code change
Verified: cargo test (701 passed), clippy -D warnings, fmt --check
glm-5.3-flash
5ded720b7b