TapAdmitMessage
Wire frames for the tap's token-gated admission handshake, multiplexed onto the same Seam.incoming the replicator's frames ride. A leading PREFIX_BYTE — which a CBOR replication frame does not begin with — lets the gate pull these frames out and pass only replication frames through to the replicator.
Flow (offering side = verifier, holds the code; pulling side = prover):
verifier → prover : Challenge(nonce)
prover → verifier: Proof(HMAC-SHA256(code, nonce))
verifier → prover : Reject(reason) // on mismatch/expiry; otherwise the peer is surfacedThe code never appears on the wire — only the Proof tag derived from it does, and a fresh per-attempt Challenge.nonce makes a captured Proof useless for replay.
Inheritors
Types
Verifier → prover: a fresh random nonce the prover must MAC with the join code.
Prover → verifier: HMAC-SHA256(code, nonce) proving knowledge of the join code.
Verifier → prover: admission refused (bad tag or expired token).