Close receiving handshakes when authority ends
Closed
TE
3h ago+498+498+012345678901234567890123456789-48-48-01234567890123456789
Close receiving connections that wait for a hello after their authority is revoked or expires. Pre-auth leases pin the current host, peer, services and public signing keys, cannot renew past their original deadline, and grant no service or JWT reuse.
Hosted Linux passes 117 receiver cases, fmt/Clippy and Rust 1.91; macOS is queued. Baseline reproduced three failures. Supervised listener/bootstrap and WG peer drain remain follow-ups.
Changelog
none