Only the node dialled as node.<node> confirms (the runtime's proof of the caller is the confirmation, ADR 0587 §6); the holder then says node-enrolled with the key's content and deletes the address key (while it still names the node) and the node's key. A stop between the event and the deletes is finished by calling confirm again; the event keeps one message. release now answers what it could not delete. Tests added: one table-style test. (issue 774, 774/S57) Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL