Layer 2 of the spec: the signature-verifying, TTL-evicting advertisement cache fed by gossip, local-first find, and hop-budgeted remote queries.