feat(storage): a member holds a generic binding record and exchanges it conditionally, blind to settlement

.github/workflows/ci.yml

@@ -195,13 +195,13 @@ jobs:
         run: |
           set -o pipefail
           cargo test --locked -p dsm_storage_node --release --lib -- --test-threads=1 \
-            db::write_once_properties db::pg::durable_posture_tests | tee registers.log
+            db::write_once_properties db::binding_properties db::pg::durable_posture_tests | tee registers.log
           passed=$(sed -n 's/^test result: ok\. \([0-9]*\) passed.*/\1/p' registers.log | head -1)
           echo "register/durability tests executed on Postgres: ${passed:-0}"
           # May only grow. If a test is legitimately added, raise this floor in
           # the same commit; if the count DROPS, the board stopped proving
           # something it used to prove.
-          test "${passed:-0}" -ge 13
+          test "${passed:-0}" -ge 18
 
   # --------------------------------------------------------------------------
   # Formal validation: TLA+ model checking + real-code bridge harness

dsm_client/deterministic_state_machine/dsm/src/common/domain_tags/dsm/misc/mod.rs

@@ -102,6 +102,9 @@ pub(super) const TAGS: &[TaggedHashDomain<'static>] = &[
     TAG_DSM_STATE_ENTROPY,
     TAG_DSM_ANCHOR_PRESENTATION_V1,
     TAG_DSM_STORAGE_SET,
+    TAG_DSM_BINDING_RECORD,
+    TAG_DSM_BINDING_RECORD_SET,
+    TAG_DSM_BINDING_RECORD_SET_KEYS,
     TAG_DSM_VAULT_STATE,
     TAG_DSM_DEVTREE_DELEGATION,
     TAG_DSM_DEVTREE_DELEGATION_GENESIS_SENTINEL_V1,

dsm_client/deterministic_state_machine/dsm/src/common/domain_tags/dsm/misc/protocol.rs

@@ -126,6 +126,23 @@ pub const TAG_DSM_VAULT_STATE_PARENT_GENESIS_V2: TaggedHashDomain<'static> =
 /// both the layout and its tag go.
 pub const TAG_DSM_STORAGE_SET: TaggedHashDomain<'static> =
     crate::tagged_domain!(b"DSM/storage-set");
+/// One generic binding record (SoFi Rev 15 Def 6.20): the digest a member
+/// reports and a Class K driver compares. Over the record's canonical
+/// protobuf bytes — the node hashes what it stores, never a decoded view.
+pub const TAG_DSM_BINDING_RECORD: TaggedHashDomain<'static> =
+    crate::tagged_domain!(b"DSM/binding-record");
+/// The exact prior record SET over a sorted key set — `expected_digest` in
+/// CompareExchangeMany (§15.5). Absent cells are part of the preimage as
+/// absences, so "nothing held" has a defined digest a first writer can
+/// exchange from.
+pub const TAG_DSM_BINDING_RECORD_SET: TaggedHashDomain<'static> =
+    crate::tagged_domain!(b"DSM/binding-record-set");
+/// The sorted key set itself — `keyset_digest` inside a record, which the
+/// node requires to equal the digest of the request's own keys (Req 15.7).
+/// Distinct from `DSM/binding-keyset`, which derives ONE resource key from a
+/// vault parent (Def 6.17); this digests a set of such keys.
+pub const TAG_DSM_BINDING_RECORD_SET_KEYS: TaggedHashDomain<'static> =
+    crate::tagged_domain!(b"DSM/binding-record-set-keys");
 /// Immutable namespace for a published `AnchorPresentationV3` — the owner's
 /// complete verification bundle for one vault state (proto bytes as payload).
 /// The object is pure transport: every claim inside is re-derived by the