ReadonlycontrolsOptional ReadonlyexpectedOptional ReadonlyexpectedOptional ReadonlyinitialInitial authority requested for an explicit local create operation. The
session only consumes this field while handling createDocument(); a
fresh openDocument() MUST NOT mint authority from bootstrap metadata.
Adapters MUST NOT populate this from plaintext server/group membership.
ReadonlyresolutionsReadonlyroots
Untrusted bootstrap evidence. The client verifies the selected root, identity-key commitments, every control signature/predecessor and every resolution proof before installing authority.