c7d384c6063dbd818e39c26c203b3bf3a1587721
Rewrite the plan around the model converged in the 2026-06-15 design session. Core shift: the friends list (stable node IDs) is the durable anchor; rooms become ephemeral cosmetic labels, not addressable places. Locked: persistent identity default-on + Settings regenerate; friends-only idle listener (answers pings only from friends via remote_id, from a saved address, no presence beacon); presence axis invisible/normal/discoverable with discovery opt-in default-off and asymmetric (only the friend who moves networks publishes); silent gossip-driven address auto-heal; and a universal floor of hand-shared member-issued tickets that always connect. Supersedes the heavyweight control-plane cut and the room-centric durable-room cut; both retained at the bottom with reasons. ~3-4 sessions, build order P1 identity -> P7 security/field-test. iroh does not force rolling IDs. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>