docs/research/QVM_CONNECT_ADMISSION.md

Original connect admission and password gates

RE-918. Reproduce with python3 scripts/analyze_qvm_connect_admission.py; focused validation: cargo xtask test-group qvm-connect-admission. Machine report.

160 actual173979 prefix cases execute userinfo70503, address252643, unsigned36306 and case-folded69386. Native userinfo is fetched first; nonzero bot flag bypasses address/password checks. Banned rejection precedes password lookup. Empty server password or case-insensitive none disables the final case-sensitive check. Rejections occur before client clear; exact messages, lookup order and selector carry are verified. Filter scratch, engine userinfo/password and native admission remain explicit boundaries.

Original executable/native runtime and complete Linux/macOS Rust/Bevy/Solari acceptance remain unverified.