internal
Contract adopted
The current account surface is the bootstrap host; Plumage becomes standalone only after the HTTP contract has soaked.
Open surface ->
Access controlled Identity and access substrate for sessions, API keys, grants, scopes, and principal documents.
Plumage is the contract-first identity substrate named by the Substrate Program. Its service contract gates every product data split: session verification, API-key authentication, and scope/grant introspection.
It still bootstraps inside O+K. The next durable step is moving callers onto the contract client before any standalone identity data split.
This project has a launch path ready.