[Lily Du (lilyydu)]

Summary

• Opt into agent-instance authentication with an instance ID, token scope, and optional tenant override.
• Keep blueprint reply keys and preserve per-recipient identity; reject incomplete or mismatched identities in agentic mode before dispatch.
• Cover configuration, per-recipient authentication, reconnect, refresh, and identity validation.