- rejects a remove or update request whose terminator is owned by a different
router, and drops unowned ids from batch removals, so a router can only
operate on its own terminators
- keeps the existing leader-side presence pre-filter in the batch handler and
applies the ownership filter after it
- adds unit tests for the ownership filter and the single-terminator check
- adds an end-to-end test that drives the fabric control channel from an
enrolled router against a second router's terminator, covering single remove,
batch remove, and re-weight, plus a control that a router can still remove its
own
Paul Lorenz