docs(architecture): the four spec docs — overview, mapping, client, auth
- overview.md: two-doors framing, family-position table, surface
categories, bounded-resources policy (max_auth_attempts 10,
keepalives 15s/3, per-channel caps), non-goals, lifecycle note
- mapping.md: the spine — channel/request rows (git exec-only, route-1
bridge, translation-bridge session rows), parse-only dispatch,
global-request rows, spawn-and-return constraint, per-build decline
matrix
- client.md: dial surface (key source + host-key policy + keepalives),
op rows (family types in, vanilla out), fail-closed acceptor
(not russh's accept-and-drop), lifecycle primitives only, POC
correctness facts carried
- auth.md: the fingerprint bridge + dispositions summary (server),
vault custody + two-case host-key policy (client)
- README index: doc table filled, current state updated
glm-5.3-flash
1bfd07adfc