PASS each World has a distinct stable World ID and an Ed25519 active key
PASS dashboard remains observer/proxy and owns no canonical World identity
PASS dynamic peer handshake admits by public-key identity and issues signed capability certificate
PASS manual admission can replace auto-admission for an unknown World
PASS A autonomously discovers dynamic IDs and routes A→B→C with per-hop transforms
PASS tampering with a capability certificate is rejected even with a valid World signature
PASS route survives dashboard shutdown because peer authentication is node-to-node
PASS when B disappears A and C dynamically admit each other and form a task-local direct bridge
PASS duality transport remains non-commuting with asymmetric authenticated peers
PASS A can queue a three-World transaction using dynamic World IDs and obtain PartialCommit
PASS coordinator ownership can transfer from A to B before execution
PASS observation-only election still converges on the same live candidate
PASS World identity and canonical state both survive an actual process restart
PASS coordination state is replicated to a quorum with term and log index
PASS queued transaction survives coordinator death and a quorum-elected World continues execution
PASS open reconciliation debt survives coordinator death and closes under the new quorum leader
PASS failover refuses authority when a majority quorum is unavailable
PASS Ed25519 key rotation preserves stable World ID through a signed continuity proof
PASS there is no federation shared-secret file or peer HMAC path in v0.6 source
