AAuth draft-11 migration and compliance remediation

.agent/plans/2026-09-08-aauth-v10-spec-migration/api-surface-map.md

@@ -1879,7 +1879,7 @@ Public owners: `AAuth.AAuthFederationOptions`, `AAuth`.
 
 ### src/AAuth/DependencyInjection/AAuthFederationServiceCollectionExtensions.cs
 
-Concept/decision: [di](#di). Source: [AAuthFederationServiceCollectionExtensions.cs](../../../src/AAuth/DependencyInjection/AAuthFederationServiceCollectionExtensions.cs).
+Concept/decision: [di](#di). Source: `src/AAuth/DependencyInjection/AAuthFederationServiceCollectionExtensions.cs` (since removed; federation is now `AAuthPersonServerBuilder.WithFederation()`).
 
 ```diff
 - Microsoft.Extensions.DependencyInjection.AAuthFederationServiceCollectionExtensions: public static IServiceCollection AddAAuthFederation ( this IServiceCollection services , AAuthKey personServerKey , string personServerIssuer , string personServerKeyId )
@@ -2970,7 +2970,7 @@ Public owners: `AAuth.Tokens.AccountBinding`, `AAuth.Tokens.AccountExpectation`,
 
 ### src/AAuth/Tokens/ActChainBuilder.cs
 
-Concept/decision: [tokens](#tokens). Source: [ActChainBuilder.cs](../../../src/AAuth/Tokens/ActChainBuilder.cs).
+Concept/decision: [tokens](#tokens). Source: [ActChainBuilder.cs](https://github.com/aauth-dev/dotnet-samples/blob/v0.10.0-alpha.1/src/AAuth/Tokens/ActChainBuilder.cs).
 
 ```diff
 - AAuth.Tokens.ActChainBuilder: public static JsonObject BuildNestedAct ( string upstreamAgentId , JsonObject ? upstreamChain = null )
@@ -2983,7 +2983,7 @@ Public owners: `AAuth.Tokens.ActChainBuilder`, `AAuth.Tokens`.
 
 ### src/AAuth/Tokens/ActChainReader.cs
 
-Concept/decision: [tokens](#tokens). Source: [ActChainReader.cs](../../../src/AAuth/Tokens/ActChainReader.cs).
+Concept/decision: [tokens](#tokens). Source: [ActChainReader.cs](https://github.com/aauth-dev/dotnet-samples/blob/v0.10.0-alpha.1/src/AAuth/Tokens/ActChainReader.cs).
 
 ```diff
 - AAuth.Tokens.ActChainReader: public static IReadOnlyList < string > GetDelegationChain ( JsonObject payload , int maxDepth = 10 )
@@ -3083,7 +3083,7 @@ Public owners: `AAuth.Tokens.AuthTokenDeliveryResult`, `AAuth.Tokens.AuthTokenRe
 
 ### src/AAuth/Tokens/MissionClaim.cs
 
-Concept/decision: [tokens](#tokens). Source: [MissionClaim.cs](../../../src/AAuth/Tokens/MissionClaim.cs).
+Concept/decision: [tokens](#tokens). Source: [MissionClaim.cs](https://github.com/aauth-dev/dotnet-samples/blob/v0.10.0-alpha.1/src/AAuth/Tokens/MissionClaim.cs).
 
 ```diff
 - AAuth.Tokens.MissionClaim: public static MissionClaim ? FromPayload ( JsonObject ? payload )

.agent/plans/2026-09-08-aauth-v10-spec-migration/conformance-ledger.md

@@ -74,7 +74,7 @@ not be mistaken for a current runtime contract.
 | [Reauthorization L1338](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1338), agent expiry limits and renewed consent | PS/AS minting, [AuthTokenBuilder](../../../src/AAuth/Tokens/AuthTokenBuilder.cs) | Implemented: [IssuanceBoundsTests](../../../tests/AAuth.Conformance/AuthTokens/IssuanceBoundsTests.cs); Wallet fresh-grant recovery browser cases |
 | [Mission creation/approval L1350](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1350), exact bytes/hash L1428 | [Mission](../../../src/AAuth/Agent/Mission.cs), governance builder/store | Implemented: [MissionS256Tests](../../../tests/AAuth.Conformance/Missions/MissionS256Tests.cs), [MissionModelTests](../../../tests/AAuth.Conformance/Missions/MissionModelTests.cs), HTTP mission approvals |
 | [Mission log/completion/status L1432](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1432), permanently terminated L1449/L1455 | Governance mapper and PS state gates | Implemented terminal rejection: [MissionTerminatedTests](../../../tests/AAuth.Conformance/Missions/MissionTerminatedTests.cs), new signed three-endpoint tests and deferred completion tests. Production store permanence/retention is Policy |
-| [Mission presentation L1488](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1488), no dereference L1490 and exact reference echo | [Mission header](../../../src/AAuth/Agent/Mission.cs), challenge/chain handlers | Implemented reference-only data flow: [MissionReferenceValidationTests](../../../tests/AAuth.Conformance/Missions/MissionReferenceValidationTests.cs), [MissionHeaderSeamTests](../../../tests/AAuth.Conformance/Missions/MissionHeaderSeamTests.cs), [MissionSignedComponentTests](../../../tests/AAuth.Conformance/HttpSignatures/MissionSignedComponentTests.cs). Resource/AS have no mission-fetch implementation; no arbitrary application callback guarantee |
+| [Mission presentation L1488](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1488), no dereference L1490 and exact reference echo | [Mission header](../../../src/AAuth/Agent/Mission.cs), challenge/chain handlers | Implemented reference-only data flow: [MissionReferenceValidationTests](https://github.com/aauth-dev/dotnet-samples/blob/v0.10.0-alpha.1/tests/AAuth.Conformance/Missions/MissionReferenceValidationTests.cs), [MissionHeaderSeamTests](https://github.com/aauth-dev/dotnet-samples/blob/v0.10.0-alpha.1/tests/AAuth.Conformance/Missions/MissionHeaderSeamTests.cs), [MissionSignedComponentTests](https://github.com/aauth-dev/dotnet-samples/blob/v0.10.0-alpha.1/tests/AAuth.Conformance/HttpSignatures/MissionSignedComponentTests.cs). Resource/AS have no mission-fetch implementation; no arbitrary application callback guarantee |
 | [PS-to-AS request L1503](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1503), child/upstream propagation and signing | [AccessServerClient](../../../src/AAuth/Access/AccessServerClient.cs), [AgentIssuanceContext](../../../src/AAuth/Tokens/AgentIssuanceContext.cs) | Implemented: [AccessServerClientTests](../../../tests/AAuth.Tests/AccessServerClientTests.cs), [DeferredFederationTests](../../../tests/AAuth.Conformance/Person/DeferredFederationTests.cs). Q2 uses normative Signature Keys jwks_uri discovery, not stale protocol example syntax |
 | [AS response/delivery L1531](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1531), claims composition L1581 | AS endpoints, [AuthTokenResponseValidator](../../../src/AAuth/Tokens/AuthTokenResponseValidator.cs) | Implemented: [AuthTokenDeliveryTests](../../../tests/AAuth.Conformance/AuthTokens/AuthTokenDeliveryTests.cs), [MockAccessServerTests](../../../tests/AAuth.Tests/Integration/MockAccessServerTests.cs); reserved claim requests/pushes rejected |
 | [Signed requested claims L1599](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1599) (#requirement-claims), [clarification action L1054](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1054) (#agent-response-to-clarification) | [TokenRequestBody](../../../src/AAuth/Server/TokenRequestBody.cs), [AS pending dispatch](../../../src/AAuth/Access/AAuthAccessServerEndpoints.cs) | Implemented, 2026-09-09 final repair: ClaimsPushPreservesRequestedCredentialNamedIdentity in [DeferredFederationTests](../../../tests/AAuth.Conformance/Person/DeferredFederationTests.cs) preserves policy-requested credential-like names and action values through signed HTTP issuance; trusted pending state controls dispatch. Raw duplicate/nested-duplicate and reserved/typed-identity failures leave policy and pending state unchanged; initial and updated-request malformed credential matrices retained |
@@ -84,7 +84,7 @@ not be mistaken for a current runtime contract.
 | [Upstream verification L1766](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1766), AS/PS route L1784, directed sub L1800 | [UpstreamTokenValidator](../../../src/AAuth/Tokens/UpstreamTokenValidator.cs), [CallChainingRouter](../../../src/AAuth/Server/CallChaining/CallChainingRouter.cs) | Implemented: [UpstreamTokenValidationTests](../../../tests/AAuth.Conformance/AuthTokens/UpstreamTokenValidationTests.cs), DirectAsChainingUsesAccessMetadataAndAgentCarrier / RejectsUnboundAuthorization in DeferredFederationTests; distinct intermediary key and audience are preserved |
 | [Interaction chaining L1819](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1819) | Concierge and shared interaction helpers | Implemented representative flows: [InteractionChainingTests](../../../tests/AAuth.Tests/Agent/InteractionChainingTests.cs), call-chain deferred browsers. Intermediary-owned pending storage requires its own ownership/retention controls; see review limits below |
 | [Sub-agents L1825](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1825), single depth and parent authorization L1859 | AgentIssuanceContext, agent identifiers and token builders | Implemented: [PersonServerMapperTests](../../../tests/AAuth.Conformance/Person/PersonServerMapperTests.cs), four-party [FederatedWorkerScenario](../../../samples/FederatedWorkerScenario.cs) and both sub-agent browser specs |
-| [Delegation chain L1874](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1874), actor nesting/no person identifiers | [ActChainBuilder](../../../src/AAuth/Tokens/ActChainBuilder.cs), [ActChainReader](../../../src/AAuth/Tokens/ActChainReader.cs) | Implemented: [ActChainBuilderTests](../../../tests/AAuth.Conformance/AuthTokens/ActChainBuilderTests.cs), [ActChainReaderTests](../../../tests/AAuth.Conformance/AuthTokens/ActChainReaderTests.cs) |
+| [Delegation chain L1874](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1874), actor nesting/no person identifiers | [ActChainBuilder](https://github.com/aauth-dev/dotnet-samples/blob/v0.10.0-alpha.1/src/AAuth/Tokens/ActChainBuilder.cs), [ActChainReader](https://github.com/aauth-dev/dotnet-samples/blob/v0.10.0-alpha.1/src/AAuth/Tokens/ActChainReader.cs) | Implemented: [ActChainBuilderTests](https://github.com/aauth-dev/dotnet-samples/blob/v0.10.0-alpha.1/tests/AAuth.Conformance/AuthTokens/ActChainBuilderTests.cs), [ActChainReaderTests](https://github.com/aauth-dev/dotnet-samples/blob/v0.10.0-alpha.1/tests/AAuth.Conformance/AuthTokens/ActChainReaderTests.cs) |
 | [Third-party login L1928](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L1928), conditional ps/start_path validation L2000 | Metadata field only | Optional unsupported by sample hosts. No login_endpoint flow is advertised/implemented by the migration; hosts enabling their own endpoint must validate PS discovery and same-origin relative start_path. Metadata serialization tests do not establish login conformance |
 | [Capabilities L2010](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L2010), ignore unknown/no assumed capabilities | [AAuthCapabilitiesHeader](../../../src/AAuth/Agent/AAuthCapabilitiesHeader.cs), exchange options | Implemented: [CapabilitiesHeaderTests](../../../tests/AAuth.Conformance/HttpSignatures/CapabilitiesHeaderTests.cs), client callback/capability tests |
 | [Scopes L2034](../../../aauth-spec/v10/draft-hardt-oauth-aauth-protocol.md#L2034), identity scopes and account L2051 | Scope validation and [AccountBinding](../../../src/AAuth/Tokens/AccountBinding.cs) | Implemented: [ScopeVocabularyTests](../../../tests/AAuth.Conformance/ResourceTokens/ScopeVocabularyTests.cs), [AccountBindingTests](../../../tests/AAuth.Tests/Tokens/AccountBindingTests.cs), two-account Bookings/Events browsers |

.agent/plans/2026-09-08-aauth-v10-spec-migration/docs-surface-map.md

@@ -207,7 +207,7 @@ file even when it has zero snippets; a file hash detects prose/navigation change
 | [samples/GuidedTour/CodeSnippets.cs](../../../samples/GuidedTour/CodeSnippets.cs) | `ff4d96d0e9b8f5cf58beba47bb15c3ed4dfcf72651ac8c6ba740489aeed10ea3` | 42 | Frozen source; links/patterns; blocks below; capability matrix for runtime/browser evidence |
 | [samples/GuidedTour/Components/_Imports.razor](../../../samples/GuidedTour/Components/_Imports.razor) | `ff71bc5b618f275846e5fc70ad99cd64d493b8bf198d6b604d7105764bbd08a0` | 0 | Frozen source; links/patterns; blocks below; capability matrix for runtime/browser evidence |
 | [samples/GuidedTour/Components/App.razor](../../../samples/GuidedTour/Components/App.razor) | `848293d6fb5463468a75591d228c60beb0b52c8c187d2fa9882d393d77f4b143` | 0 | Frozen source; links/patterns; blocks below; capability matrix for runtime/browser evidence |
-| [samples/GuidedTour/Components/CapabilityTourChrome.razor](../../../samples/GuidedTour/Components/CapabilityTourChrome.razor) | `53bb329bec371f05041a298da8d6f30bb41af8597553f04de66bcc6e6f1ec724` | 0 | Frozen source; links/patterns; blocks below; capability matrix for runtime/browser evidence |
+| `samples/GuidedTour/Components/CapabilityTourChrome.razor` (removed; flows 12–15 now run in `/tour`) | `53bb329bec371f05041a298da8d6f30bb41af8597553f04de66bcc6e6f1ec724` | 0 | Frozen source; links/patterns; blocks below; capability matrix for runtime/browser evidence |
 | [samples/GuidedTour/Components/EntityHighlighter.cs](../../../samples/GuidedTour/Components/EntityHighlighter.cs) | `44dbe8b987a09db2021e280d3156ac5fb1b59a30854adc611f3f153d509ab829` | 0 | Frozen source; links/patterns; blocks below; capability matrix for runtime/browser evidence |
 | [samples/GuidedTour/Components/Pages/Catalog.razor](../../../samples/GuidedTour/Components/Pages/Catalog.razor) | `3d9fdad1a7512894272e75a106ba55030e8f5c8644e7d0b726b8954dd0c7c8ce` | 0 | Frozen source; links/patterns; blocks below; capability matrix for runtime/browser evidence |
 | [samples/GuidedTour/Components/Pages/Documents.razor](../../../samples/GuidedTour/Components/Pages/Documents.razor) | `744149b225526a8f806399051240443a71157683b6ad2551d5b756f940fdc556` | 0 | Frozen source; links/patterns; blocks below; capability matrix for runtime/browser evidence |

.agent/plans/2026-09-08-aauth-v10-spec-migration/implementation-plan.md

@@ -418,7 +418,7 @@ Phase rule: preserve authenticated context end to end; no placeholder consent gr
 - Complete [UpstreamTokenValidator](../../../src/AAuth/Tokens/UpstreamTokenValidator.cs)
   structural validation without incorrectly equating the original upstream PoP
   key to the intermediary's current request key.
-- Tighten [ActChainBuilder](../../../src/AAuth/Tokens/ActChainBuilder.cs), readers,
+- Tighten [ActChainBuilder](https://github.com/aauth-dev/dotnet-samples/blob/v0.10.0-alpha.1/src/AAuth/Tokens/ActChainBuilder.cs), readers,
   and [AuthTokenResponseValidator](../../../src/AAuth/Tokens/AuthTokenResponseValidator.cs):
   immediate actor, nested context, no person identifiers, independently asserted
   downstream sub. Extend agent delivery checks as well as PS-side checks.

.agent/plans/2026-09-08-aauth-v10-spec-migration/research.md

@@ -341,8 +341,8 @@ P2, R; pre-existing structural gap, with a v10 actor prohibition.
 [UpstreamTokenValidator L219](../../../src/AAuth/Tokens/UpstreamTokenValidator.cs#L219)
 uses generic JWT verification without all those checks. Trust and audience
 checks exist. [P1809] (`#directed-sub-chaining`) prohibits person
-identifiers inside `act`; [ActChainBuilder L32](../../../src/AAuth/Tokens/ActChainBuilder.cs#L32)
-clones upstream objects and [L55](../../../src/AAuth/Tokens/ActChainBuilder.cs#L55)
+identifiers inside `act`; [ActChainBuilder L32](https://github.com/aauth-dev/dotnet-samples/blob/v0.10.0-alpha.1/src/AAuth/Tokens/ActChainBuilder.cs#L32)
+clones upstream objects and [L55](https://github.com/aauth-dev/dotnet-samples/blob/v0.10.0-alpha.1/src/AAuth/Tokens/ActChainBuilder.cs#L55)
 only checks agent presence/depth. Direct top-level upstream `sub` copying was
 not found. [AuthTokenBuilder L211](../../../src/AAuth/Tokens/AuthTokenBuilder.cs#L211)
 blocks only already-populated extra claims, allowing unset reserved fields such