internal/identity: modern plc_operation genesis ops (escrow rotation key signs; per-actor K256 verification keys via indigo atcrypto), AES-256-GCM key custody under BRIDGE_KEK with DID-bound AAD, handle scheme with collision suffixing + hash fallback labels, resolveHandle XRPC + /.well-known/atproto-did. internal/repo: signed v3 MST commits on indigo repo/mst, postgres blocks/repo_state, firehose_events emitted in the same tx (since_rev + prev_data_cid for sync v1.1), global advisory-lock commit serialization (seq order == visibility order), deterministic content TIDs with hash-filled microseconds, KeyUse-aware tombstone freeze (writes blocked, deletes allowed for consent scrubbing). Reviewed by 8 reviewers (5 Claude agents + Codex gpt-5.5, Gemini 3.1 Pro, GLM 5.2): 16 fixes applied (genesis-commit race, firehose seq ordering, MST-corruption-as-NotFound, orphaned-DID window, TID birthday collisions, CAR root-first, 63-char handle overflow) + 7 review-identified tests (golden TID pins, commit-layer tombstone freeze, cross-manager genesis serialization, restart rev continuity, cross-context AAD). Tests run against local PLC directory only (hard non-loopback guard). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>