Implemented fresh-browser bootstrap for private spaces served by a running daemon.
- Added bounded, additive DID claims to private wire catch-up frames without changing the wire version.
- Kept unknown-peer refusals unchanged while buffering claimed identities for verify-before-keep public directory polling.
- Limited candidate work per cycle, applied endpoint cooldowns, and retained only DIDs whose own public repo binds the authenticated endpoint.
- Plumbed daemon and browser identities through the shared endpoint, waking browser connection retries immediately after verification.
- Made browser directory polling honor bookmark/ticket peer hints.
- Added optional bounded peer hints to tickets, minted from active addressed members, and preserved them through browser and CLI acceptance.
- Added wire validation and candidate-drain regression coverage.
Checks: pnpm lint, pnpm typecheck, and pnpm test all pass.
Remaining risk: live relay interoperability was not exercised in this container; the full transport-independent suite passes, including browser bundle and UI tests.