peerAssertedPrincipalNeverReachesTheRoster

Security. An identity a peer asserts about itself never becomes an attestation. The impostor loads both channels a joiner controls with the same claim — the id it self-asserts in its preamble, and the body of the frame it sends — over a link the host verified as nothing at all. It must stay absent from the roster, and its claim must not be attributed to anyone.

The witness is the rig: a peer admitted the ordinary attested way in the same run, so the impostor's absence is a refusal and not an artefact of a roster that never fills. The heard.first { … } await is the precondition — the claim is proven to have crossed the wire before the roster is judged, so a harness that dropped AttestationHarness.admitClaiming's claimed on the floor cannot pass by never asserting anything.