1afdccbefe55560260868a6b76417ace4085e812
Reject signed Announce(PeerState) whose embedded state.addr.id does not match the authenticated payload.author, closing the residual S2 gap where a valid signer could advertise another node's EndpointAddr. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>