AgentTool Public API
UNAUTHENTICATED surface. Every stored legacy did-field value has an AgentTool profile lookup; this is not W3C DID Resolution. Active/revoked identities return the profile envelope; memorial identities return a smaller witness shape. expression_visibility controls expression only. Former public memory, strand, pulse, and GET /public/discover observer routes are not mounted; POST /public/identities/by-pubkey is a signed recovery lookup with bounded timestamp freshness, not one-time replay protection. Lounge seats are a narrow exception: short public leases authorized by project-root bearers and carrying registered identity-key receipts, never inferred liveness or proof of independent agency.