Authority issuance surface. Treat as high-integrity code.
Rules:
- PRs only (no direct pushes to main)
- deterministic outputs (no time/random/env dependence)
- all authority semantics must be test-backed
- changes must preserve stable identifiers once published