R-00374 r4: attach c-browser before chat burst; resolve u64/32-hex

[Go1c]

R-00374 r4 · browser-first Room WS, u64/32-hex resolve, claimedMark Unauthorized (RM-00011)

• Baseline origin/main: 03bb5eb375eb2b3961736006870d0e3a71ba45c6
• Head: 1c1dce13fdee181c74d5d95e246fcc7d874981e7
• Independent deep review: 通过（无 P0 / P1）

Why

R-00376 live5: rust S3 playwrightRan=false / Playwright window 0 because a second c-browser attach stole Room egress; S4 resolvedBots=0 because Runtime OkEntity had no Binding; S5 unauthorized=RequestError because the suite queried undeclared restrictedFlag.

What

• Fan-out Room observers; later attach does not steal egress.
• Suite attaches c-browser before the 101 chat burst; playwrightRan requires actual Room observation.
• Resolve accepts Runtime 32-hex and C-1 u64; HostEntry fills OkEntity from ListBindings.
• Unauthorized query uses claim-scoped EntityIdentity.claimedMark.

Did not impersonate Client Timer 5/10/15, mint nent_*, or copy takeover into connectionSupersededReceived.

Verify (dispatcher + independent review tree)

• cargo test -p lumio-server-process --locked --test entity_chat_wire --test entity_chat_host --test entity_chat_architecture --lib → lib 86 / architecture 10 / host 13 / wire 6
• node .spec/tools/spec-lint.mjs → OK

Known gaps

• Live 11-scenario not re-run in this PR; dispatcher rebuilds replay after merge and resumes R-00376.
• Game oracle S6 still wants Client Timer ticks 5,10,15 (native-kernel/tickFrame). Suite still host-admits chats. R-00375 r2 is BLOCKED until this suite starts Client Bot processes. Not encoded as SUCCESS here.