openspec: the agent identity pool lifecycle package (Ting/Ting#2, Vedanta#30/#31)
Projects from delivered OpenSpec 61 v0.1.4 rather than amending it, per the
freeholder ruling on Ting/Ting#2 Q1. Carries the ratified reconciliation's
concrete lifecycle: ten UUID-pinned principals, reserve-before-create naming,
adopt-on-retry, one immutable grant per slot, checkout under a new grant with
the occupancy stamp, and ordinary completion that preserves the worker.
States the two things a reader would otherwise get wrong. The occupancy value is
alias `custom_metadata`, not a claim — a kanidm claim map is `valuesByGroup` and
has no per-allocation hook. And the contract's existing `assignment_id` is the
queen's tenure assignment, shared by every drone under her, so it cannot be
reused for occupancy: a path built on it looks isolated and is not.
Allocation carries no acceptance yet. The negative-liveness source is Q2 and the
freeholder deferred it; bring-up and the return half are unaffected.
