[Technical-Track] Layer 1 — P2P UDP Transport for Sovereign Telemetry

[Cortex-psylead]

Context

Cortex Protocol's architecture defines a P2P transport layer for the DeSci Channel (Milestone 1). This issue tracks the specification and reference implementation of the UDP-based peer-to-peer transport that allows Governance Nodes to receive anonymous biometric feature vectors without a central server.

Scope

• Define the P2P UDP transport protocol specification in docs/architecture/
• Implement the transport layer in src/layer2/ as a Python reference module
• Ensure zero raw biometric data traverses the transport (SAL boundary enforced before transmission)
• Anonymous 41-byte feature vectors only (FFT-projected, no timestamp, no session ID)
• Integrate with the existing TelemetryRouter in src/sal/telemetry_router.py

Acceptance criteria

• Protocol specification document published in docs/architecture/TRANSPORT.md
• Reference implementation passes SAL Boundary Guard (INVARIANT 1 — zero network egress from SAL core)
• Unit tests cover: connection establishment, vector transmission, connection teardown
• No raw biometric data detectable in transmitted packets (verified by test)
• CI passes with new module included

Architecture note

The transport layer sits OUTSIDE the SAL boundary by design. The SAL produces anonymized tensors; the transport layer delivers them. These two responsibilities must never be merged into the same module.

References

• ARCHITECTURE.md — Layer 2 specification
• ROADMAP.md — Milestone 1 DeSci Channel
• src/sal/telemetry_router.py — upstream producer
• SECURITY.md §1 — SAL boundary definition