docs: draft Prompt 3 canonicalization and identity ADRs

[chefmrfrizzle]

Summary

• record current primary-source findings for canonical JSON, version compatibility, identifiers, cryptographic agility, event identity, delegation, revocation, and reproduction independence
• propose ADR-0011 through ADR-0014 without accepting them
• add a source-by-source audit and correct numeric/version, downgrade, source/delegation, revocation-time, privacy, and independence overclaims
• preserve every concrete cryptographic choice as BLOCKED_UNVERIFIED

Exact-head review record

• the requested audit targeted original head 47439b5d311eb30ac5db59be05f8b6696f093620
• that head was public, draft, green, REVIEW_REQUIRED, and had zero reviews, reviewer requests, conversation comments, or review threads
• documentation corrections produced new head 8d84c999a453031c740beff3626dd2dfcf6dfc54
• every required independent approval must target the exact final head; the original-head audit is not approval of the corrected head

Hard boundaries

• documentation only; no schemas, canonicalizers, adapters, workers, signing, authentication, payment, or production infrastructure
• do not merge or treat this PR as approval of security, cryptographic, scientific-acceptance, or reproduction-independence policy
• D-017, D-019, D-023, and D-024 remain blocked
• the solo-maintainer exception does not satisfy independent-person assurance

Required separate reviewer seats — all unfilled

• R1: interoperability/security reviewer for ADR-0011 / D-023
• R2: cryptography reviewer for ADR-0012 / D-007 / D-017
• R3: identity/institutional IT reviewer for ADR-0013 / D-024 (split into two people if one reviewer lacks both qualifications)
• R4: computational-materials methodology reviewer for ADR-0014 / D-018 / D-019 / D-021 / D-022

The seats must be held by separate qualified people outside the maintainer's control. @11BUSD is the same disclosed operator as the owner and is ineligible for R1-R4. No usernames have been supplied for qualified reviewers, so no review request has been fabricated.

Verification

• ./tests/test_repository_baseline.sh
• ./scripts/check_repository_baseline.sh
• full PR diff scope: only docs/** and schemas/README.md

See docs/phase-0/PROMPT_3_REVIEW_GATE.md for the source audit, resolved proposal defects, unresolved decisions, owner requirements, and safe Prompt 4 prerequisites.