[first-assist]

Generated scalar-key Changed subscriptions accept an optional typed key filter for ordinary and append-only entities. Exact key selection retains current entity, row, key-field, selected-field, provenance, scope and assurance checks. Omitting the key retains entity-wide authorized delivery; a key-filtered action-only selection still requires key-field authority. The operation catalogue matches the generated SDL.

Source regressions cover integer-key identity and filtering, authorization, naming and case-feature behavior. Both inserted keys reach an omitted-key subscriber, while only the selected key reaches its filtered subscriber. Router wire tests inherit child stderr to expose startup diagnostics and carry their required 0.6.5 package identity; no router executable is distributed by this draft.

Rebuilt on merged #198 main efd201d2809ed4a2dc3a1987a5cd1b1277420bd5, preserving host timestamps, composite keysets, query-shape selection and generated-result disclosure. Proposed runtime/macros pair 0.61.0; router0.6.5. Catalog0.4.2 and AI profiles0.16.2 remain from #198. Seven lockfiles have matching local versions and unchanged external resolutions. Source-only documentation (210), committed package release policy and diff checks pass. Prior b85458e exact head was 18/18 green per Root14248, but this rebased head needs fresh CI. No local Rust/format/metadata command ran; captain a18 blackout remains active. Keep draft; GentleCarp alone merges.

Documentation impact

• Documentation updated
• No documentation impact

Current source: afa966b23fa67447cbb4059b65ca1087bc488f4a (tree c004ac9cbc5fda59389fc10ad2ae6ed58a1a782d).