schema: spec-driven created: 2026-08-12 goal: Split client-facing session authority from the provider-bearing Server-to-gateway authority for the coordinated RC4 hard cut.