Identity fallbacks should preserve evidence authority and provenance
When an external check requires identifier A but accepted evidence may contain only identifier B, keep the fallback inside the existing observation boundary: prefer A when directly observed, resolve B→A through one strict provider adapter, validate the returned identity against B…