Phase 2: identity plumbing — group/member config, author: attribution

Config schema {owner,endpoint,key} -> {group, member, endpoint, key}:
- member (kebab-case slug, validated) is REQUIRED — who this machine
  writes as; group is the descriptive team name. CHORUS_GROUP/
  CHORUS_MEMBER env, config set --group/--member, doctor + config show
  both with sources, NOT-CONFIGURED (78) without a valid member.
- capture stamps author: <member> on every note (_build_note); bootstrap
  gains {{MEMBER}} substitution and stamps the seeded anchors; all 8
  scaffold templates + canonical frontmatter docs gain author:.
- New missing-author lint check: agent_written notes must carry author:
  (bootstrap marker exempt — plugin-owned).
- Lock owner is now <member>-<client>-<pid> (auto_owner); offline-queue
  records carry a member field for audit.
- build.py --bake-key bakes group/member/endpoint/key (--group/--member;
  member required + slug-validated) for per-member artifacts.
- Manifest -> 2.0.0-alpha.2; rebuilt chorus-memory.plugin.

Verified: 25/25 unit (+config/member checks), scaffold suite (+6 new
member/config assertions), routing-sync, 4 mock e2e (+capture-stamps-
author), run_eval metrics unchanged, +8 phase-2 smoke checks green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

chorus-memory.plugin.src/skills/chorus-memory/references/vault-layout.md

@@ -73,6 +73,9 @@ tags: []         # REQUIRED (non-empty) on entity notes — capture seeds the ki
 aliases: []        # optional — other names this entity is called (Obsidian-native). Folded
                    #   into the entity index so a shortened/expanded name resolves to this note.
 agent_written: false
+author:            # member id of the session that wrote this note — REQUIRED when
+                   #   agent_written is true (capture stamps the configured member;
+                   #   /chorus-health flags missing-author)
 source_notes: []   # plain relative paths as strings — NEVER [[wikilinks]]
 ---
 ```
@@ -80,9 +83,12 @@ source_notes: []   # plain relative paths as strings — NEVER [[wikilinks]]
 `aliases:` is the **durable, Obsidian-native home for alternate names** of an entity (e.g. the project `chorus` is also "chorus-memory" / "chorus plugin"). `capture` auto-derives the obvious case/punctuation variants of the title and writes them here; `sweep` folds frontmatter aliases back into the entity index, so they survive an index rebuild. List plain strings, never `[[wikilinks]]`.
 
 `agent_written: true` + a populated `source_notes` is the key signal separating
-agent-managed content from human-authored content. When appending with POST, do
-not rewrite frontmatter — the append goes after existing content. To change
-`updated:` or `status:`, use PATCH with `Target-Type: frontmatter`.
+agent-managed content from human-authored content. `author:` records **which
+member's session** wrote the note — CHORUS is group memory, so every agent write
+is attributed (`capture` stamps it from the machine's configured `member`; when
+writing a note by hand with PUT, set it to your member id). When appending with
+POST, do not rewrite frontmatter — the append goes after existing content. To
+change `updated:` or `status:`, use PATCH with `Target-Type: frontmatter`.
 
 **Frontmatter field semantics:**