Documents what the adversarial pass on the provisioning lifecycle found: the caller-asserted-handle race now fixed, three designs that held under concurrency attack (same agent id, naming's own registry, the e-stop/lifecycle gates), and three leads left open for a later pass -- multi-label handles escaping a single-label wildcard, best- effort DNS rollback leaving stray records, and an unbounded hint-then- generate attempt budget. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Change-Id: I0f15aeb6a6e41c06fedc523ebb0cfa4fc4d2a44a