Criticals (pinned test-first, both security fixes bite-proofed): - SECURITY: inbox resolution now FetchActorSameAuthority + rejects a resolved inbox whose host isn't same-authority with the community — a compromised/MITM'd Group doc can no longer blackhole a community's federated content (signed as the user) to an attacker inbox - consume gate no longer drops intents: real persisting enqueuer wired whenever CONSUMER_ENABLED; OUTBOUND_WORKERS>0 only gates the delivery-worker goroutines - consent-blocked create cancels ONLY the claimed delivery (CancelClaimed) — pending Delete/Undo retractions survive (retraction asymmetry) - park advances next_attempt by a real delay; causal wait is WALL-CLOCK-bounded (CausalWaitBudget), not attempt-bounded — no hot-spin, no self-poison of out-of-order replies - accepted_at stamped before/atomic with MarkDelivered (held children unblock reliably) - causal gate keys on the child's actual parent_at_uri (ParentDeliveryPoisoned), not seq-ancestry — an unrelated poison no longer poisons later replies Hardening: 401 transient not inbox-rotation; case-insensitive host kill switch; embed href scheme allowlist; redrive 400s on bad body + requires a filter; +docs (false index comment, stale seam comments, dead ActorSigner removed). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>