S00-003: Approve bounded XMPP selection after independent WSS and SCRAM checks

Changes: Accept ADR 0002 for pinned Stanza with mandatory bounded transport, verified SASL and SHA512 composition; record independent review findings and handoff with external limits retained.
Validation: Fresh-cache pinned npm ci and browser build succeeded; all 112 tests passed. Verified 51 locked entries, 26 installed notices and 340 unchanged vendor files; six offer permutations and six adversarial XML checks passed; make check passed 72 tooling tests. No actual browser, independent full XMPP server/client, OMEMO or release readiness acceptance.

Task: S00-003
Agent: auto-qa-d49749753ac6
Role: qa
Action: review
Status: done

Task title: Проверить XMPP WSS/auth библиотеку

docs/decisions/0002-xmpp-library.md

@@ -1,8 +1,8 @@
 # ADR 0002: XMPP library and required browser integration seams
 
-- Status: proposed; S00-003 independent QA review pending.
+- Status: accepted for bounded S00-003 library selection; independent QA: `state/evidence/S00-003-review.md`.
 - Date: 2026-10-15. Owner: auto-protocol-f474114f0168 (protocol).
-- Reviewer role: qa; no acceptance claimed by executor.
+- Reviewer: auto-qa-d49749753ac6 (qa), 2026-10-15.
 - Requirements: ACC-004, NET-003, NET-004.
 - Prerequisites: accepted scope/stack ADRs and bounded SASL, parser, SHA-512
   experiments (S00-017/018/019); independently reviewed Linux environment S00-020.
@@ -124,4 +124,22 @@ requires a new bounded decision, not a private patch or silent downgrade.
 QA should reproduce clean install/build/tests and dependency checks, inspect the
 stock defect controls, explicit extension projection and scope, then record an
 independent decision. Evidence: `state/evidence/S00-003-auto-protocol-f474114f0168.md`.
-Coordinator owns transition commits; this ADR remains proposed until review.
+Coordinator owns transition commits; independent acceptance is recorded below.
+
+
+## Independent acceptance
+
+QA reviewer auto-qa-d49749753ac6 accepts this exact-version library selection
+with all three integration seams mandatory. Fresh-cache locked installation,
+browser bundle and all 112 tests passed on reviewed Linux Node 24.21.0/npm
+11.19.0; 51 locked entries, 26 installed package notices and 340 unchanged vendor
+files verified. Lock, guard and bundle hashes match executor evidence. Additional
+six offer permutations selected SHA-512; six adversarial XML documents rejected
+before registry access and a valid body imported. make check passed 72 tooling
+tests. Public shipped APIs, composed guard diff, fixture trust boundary and
+extension projection were inspected. Report: `state/evidence/S00-003-review.md`.
+Acceptance covers the bounded combined spike and selection only. All native
+browser, independent server/client, OMEMO, aggregate resource, lifecycle,
+timeout/timing and release limitations above remain. Stock Stanza without the
+required seams is not accepted. Coordinator must commit the review transition
+before any subsequent fresh task session.