kami
252f773223
The act path minted IDs per hop and trusted whatever Praxis returned for a scoped attention query. A service that ignored the entity filter would have had its unrelated items read back to the owner as his. The handler now assigns one correlation ID at the top of the action and passes it down, and drops any item the response did not tag with the requested entity. Traces are written to the trace table with the causation ID and HTTP status hoisted into columns, the duplicate legacy Hexis trace is gone, truncated lists say so, and a rejected credential gets its own reply instead of looking like an outage. Found in review of #83 and #84.