DL-392

Owner peering is a bilateral trust edge between two user accounts of one tenant: two directed rows in user_peers(user_id, peer_user_id), live only when both exist; approve inserts your row, revoke deletes it, state is derived. Keyed on account_id, never a handle, so rename keeps it and a reclaimed handle starts with no edges. A recipient cannot decline yet; a pending row grants nothing.

Status: Active (Matt, 2026-09-28)