Decision procedure for rotating per-rail agent wallet credentials without breaking in-flight x402 sessions. Covers when

Decision procedure for rotating per-rail agent wallet credentials without breaking in-flight x402 sessions. Covers when rotation is triggered (scheduled vs breach vs policy change), dual-key overlap windows so open payment sessions survive the cutover, sequencing of rotation across rails, revocation cascade order (session keys before master keys), and post-rotation reconciliation including re-attestation to the owner wallet. Inputs: credential age, exposure events, open session count, rail