SamecaRelay

Peers are set per destination eid. sendExtend is factory-only. lzReceive is endpoint-only, peer-checked, and marks both the guid and the payload hash so a replay fails either way.

Production wires the official LZ endpoint. Tests use a mock that delivers immediately. Failed or delayed delivery means the twin book does not exist yet. That is not a bridge of inventory.