carlos / platform Public

Stage 4a spec: platform STUN and TURN relay (design doc, no code)

Adds docs/superpowers/specs/2026-09-07-relay-stun-turn-design.md, revision 6: the stage 4a design under the media roadmap. A carlos-relay.service unit built on pion/turn v4.1.4 on every armed region box; STUN to anyone, TURN to holders of credentials an enabled app minted; allocations bound to their creator and ended at credential expiry, disable, region removal, master retirement, lease lapse or budget; per-app metering; private peers refused. carlos relay enable|status|disable|rotate|adopted, keys delivered as sealed config, an app-facing contract (§2) with a test vector that the Oficina Meet app has reviewed and is coding against.

Paul ruled on the six decisions (§9) on 2026-09-07: four-hour credentials, member-level enable, console-held masters with the exposure stated, no TURN over TLS, two meters, the stated limits. The roadmap's stage 4a passages and gate are amended in this branch to match.

GPT-6 via Codex reviewed six rounds from CODEX-REVIEW-BRIEF-RELAY.md (20, 12, 8, 3, 1, then accept); findings committed unedited as CODEX-FINDINGS-RELAY*.md, every one taken.

Also amends the media roadmap (custody, placement, peer policy, authority lifecycle, accounting) so the two documents agree. Next: the implementation plan.