The transport-proven origin of a message, for the gate_user_msg_type
identity gate. Constructed from who the sender is — a bound endpoint’s
resolved type, or a bare local CLI with no agent-endpoint identity behind it
— never from the message payload. A forged from attribute or any
payload-claimed origin is inert here (KNOWN-HAZARDS 7.3/7.5): authority comes
from who you are, not what you wrote.
The local user’s own CLI: a bare spt send whose sender resolves to no
agent-family endpoint. User-backed by the single-box trust posture (a
hosted agent acts through its endpoint, the MsgOrigin::Endpoint
arm — not this one).
A bound endpoint of a known type — a local emit, or a WAN inbound whose
origin endpoint was resolved from the registry keyed by the QUIC-proven
remote node id (never wire bytes).