- adds the router-side TakeoverCircuit handler: verifies the reroute
token, matches the authenticated identity, re-checks dial authorization
locally, pre-registers the reverse-direction forwarder at the preserved
ingress address, and dispatches the takeover to the owning controller
- advertises the SDK-reroute capability in the edge listener hello
- ignores ingress faults from a router that is no longer the circuit's
current ingress, so a stale post-takeover fault cannot Limbo or tear
down a relocated circuit
- makes endpoint cleanup match-aware and link-to-circuit idempotent so a
superseding takeover registration is not clobbered
Paul Lorenz
cbb38eece9