[masarray]

P0-A end-to-end consumer authority (draft, stacked on #621)

• Engine exact trial pin ccf31f60095ea65f9095514f0fa0102060962049 from docs: publish ARSAS 1.6.30 release notes #177, previous 51c2eefd61d6bcbe1116fda6b781b74bb9cf06da preserved as priorTrialPin.
• Fix source root: Iec61850DeviceIdentityResolver.Resolve no longer passes previous liveModel.IedName as an explicit alias; the earlier stale SIE must not prevent resolving five live SIEBCU* domains to provisional SIEBCU.
• SHA-verified TrustedSclIdentityAuthority passes exact selected AP to engine for both open IID and remembered verified source; raw case-sensitive MMS domain identities are preserved.
• Synthetic tests: five LDs and SHA-pinned IID project verified SIEBCU/CTRL/MEAS/PROT/UD1/UD2; wrong selected AP fails closed; no-SCL previous heuristic cannot self-promote; case-distinct MMS LDs remain separate.
• Engine RED run 39228468935 (6 expected failures) → GREEN run 39228439974 (1152/1152 pass).
• Exact-SHA Windows Build ARSAS run 39228850684 and installer run 39228850852 are the integration evidence gates. Some historical mainline/promotion guards intentionally reject unaccepted trial pins; no broad bypass.
• No write, control, RCB lifecycle, report or packet-path changes. CODE consumer / installer status pending CI; SIMULATOR full association and FIELD unverified. Keep draft and do not merge or release.

[masarray]

D28 archival on maintainer direction: older experimental IEC 61850 branch superseded by the latest successful, operator-accepted baseline. The operator will not recapture evidence for this historical trial. Closing as NOT MERGED, without modifying runtime or stable release. Historical HEAD c6b0090e75b7f37e32214d34a0f6d88a0a541ee9 and its distinct code/tests remain preserved in GitHub; those unmerged changes are not falsely claimed as implemented. This retirement removes a stale integration proposal, not an established safety limitation or protocol fact. No follow-up capture required for PR cleanup.