The vault hands every token (ADR 0550 §3); current names the licence, its key, kind, generation, health and access expiry, and keeps the account's identity for the agent's account file. bindings takes an optional consumer, answered unpaged. Builds: design 39 bus-and-switch §18, B7, B10, B19 Claude-Session: https://claude.ai/code/session_01NcbgfHb9d4T9nq5Q6WqdiJ