ci / rust (push) Failing after 5m25s
The asymmetric-VLAN security boundary and the broker's RPC error branches had no tests, so a regression that leaked a JWT across perimeters or dialed across them would ship undetected. Adds the required coverage: registry (state.rs unit): - perimeter_for_requires_both_id_and_addr - resolve_attach_refuses_self_target - resolve_attach_returns_unknown_session_for_orphan_id daemon broker (broker.rs unit): - broker_resolve_attach_propagates_registry_err - broker_resolve_attach_times_out_when_no_reply (paused-clock, instant) daemon e2e: - broker_attach_returns_502_on_perimeter_mismatch (two daemons, different perimeters → structured 502, never dials across) Enables tokio `test-util` in maestro-daemon dev-deps for the paused-clock test. Unblocks NAP-272. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>