Phase 4 · bounded reviewer access

Invite one exact review.

Use the epistemic operations token. It remains in component memory only. Reviewer credentials are generated once, returned once, and never persisted in plaintext.