Auto-review follow-ups for PR #361: docs(plans): the protocol v4 wire break — forward secrecy, AAD over the frame's identity, and the cohort choreography

[github-actions]

Tracking auto-review follow-ups for #361 (verdict: warn).

🟡 Nits

• docs/plans/2026-09-11-fetchproxy-protocol-v4.md residual item 1 (M1) cites derivePairCodeFromIds, which Task 1.4 deletes, breaking the section's stated contract that it holds the day v4 ships

---

Checklist regenerated from the auto-review of 588453a (run). Ticks survive later rounds, but a round that reviewed an older commit can still re-list something already fixed — check that SHA before redoing an item.

When addressing the review on #361, resolve each item and add Closes #<this issue> to the PR once everything is genuinely fixed; deferred items stay open here. See the auto-review follow-up convention in CLAUDE.md.