Kronikol4J servlet filter — server-side Layer-1 test-identity resolution (plan §7): reads the test-identity headers off an incoming request and scopes them for request handling, so tracking inside the system-under-test attributes to the calling test. Targets jakarta (§15).