Groups and federation: bounded collaboration, local admission

Group Collaboration defines protected per-member state; Federation Governance supplies threshold evidence while final Endpoint admission remains local.

Group Collaboration

A Group is a protected versioned object with bounded Endpoint membership, authorized transitions, per-member projections, partial failure, and aggregate results. It is not a fourth entity, room service, account, or Network membership record.

Protected state and partial failure

Membership, roles, message context, and results remain inside Endpoint protection. The max-64 construction represents each independently key-holding participant as an Endpoint. A Station cannot order membership or authorize transitions, and one failed member does not manufacture aggregate success.

Federation Governance

Governance defines deterministic offline evaluation of membership statements, compatibility certification for one exact Protocol Line identity, revocation, distribution binding, consistency, equivocation, expiry, rotation, and recovery.

Independent roots and roles

Membership, compatibility, revocation, distribution, consistency, recovery, and abuse use separate threshold-governed roots. No single signer, operator, Station, service, or committee member can authorize a complete bundle or turn evidence into Endpoint trust.

Admission remains endpoint-local

Governance evidence is a local-policy input. Equivocation, rollback, stale or expired metadata, compromised roots, incomplete thresholds, and conflicting state reject without changing local high-water state.