Enrich the base extension docs so the early review history is preserved rather
than erased by the narrow first cut:
- trust-annotations.mdx: add a normative subsection distinguishing result-level
untrusted from tool-definition openWorldHint (the SEP-1913 #711 distinction).
- open-questions.md: capture the sensitivity-field shape debate, enforcement-vs-
advisory risk, per-block byte ranges, taint persistence, and sequence-shape,
each attributed to the reviewer who raised it; add a Naming (under review)
section for the contested field/extension names.
- related-work.md: add verified FIDES alternatives (Permissive IFC 2410.03055,
AirGapAgent 2405.05175, CaMeL 2503.18813) and a schemes-vs-host-architectures
distinction.
- decisions.md: log the scheme/architecture boundary and the feedback-capture
decision.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
0be45d9b95