fix(agent99): bind local controlled dispatch identity

scripts/reboot-recovery/tests/test_agent99_recovery_coordinator_contract.py

@@ -37,6 +37,32 @@ def test_host111_is_in_recovery_executor_and_all_host_readiness_scope() -> None:
     assert '-Source agent99-startup-recovery' in tasks
 
 
+def test_startup_and_desktop_controlled_requests_bind_canonical_dispatch_identity() -> None:
+    submit = read("agent99-submit-request.ps1")
+
+    assert "function New-AgentControlledDispatchIdentity" in submit
+    assert "function New-AgentUuidV5" in submit
+    assert '6ba7b811-9dad-11d1-80b4-00c04fd430c8' in submit
+    assert 'agent99-controlled-dispatch:$canonical' in submit
+    assert 'schema_version = "agent99_controlled_dispatch_identity_v1"' in submit
+    for field in (
+        "automationRunId",
+        "traceId",
+        "workItemId",
+        "idempotencyKey",
+        "executionGeneration",
+        "incidentId",
+        "approvalId",
+        "projectId",
+        "sourceFingerprint",
+        "dispatchRouteId",
+        "singleFlightKey",
+        "lockOwner",
+        "canonicalDigest",
+    ):
+        assert f"{field} = $dispatchIdentity.{field}" in submit
+
+
 def test_coordinator_covers_all_hosts_and_full_recovery_evidence() -> None:
     control = read("agent99-control-plane.ps1")