Orient

Whoami-prepended orientation. An ANONYMOUS caller (no/invalid token) still gets the public marketplace brief — this is the onboarding entry point for a brand-new user whose agent hasn't signed in yet, so it must never 401. A marketplace-only caller (signed-in human with no tenant, or a catalog-scoped agent) gets the same brief with a real whoami; a tenant member gets the full spec. ?topic= selects a section of the brief; an unknown or empty topic falls back to the core brief, so a wrong guess costs a round-trip and never a 404. Hardened: a spec-serve or hint-write failure degrades to the brief, never a 5xx.