- use translator actions to bridge protocol message contexts into generic contexts
	- currently e.g. AttributeRecipientContext
	- ask Rod to define current resolver and filter input/output contract

- refactoring notes
	- Refactor so that AuthenticationContext is only about running authentication subsystem, doesn't expose historical or emergent identity info

	- Move identity info into a "SubjectContext"
	- Model workflow output as AuthenticationEvent (current class)
	- Session layer stores AuthenticationEvents
	- Expose identity and AuthenticationEvents via a top-level SubjectContext to be used by multiple subsystems

- Session layer needs to support pluggable serialization for Java Subjects

- Subsystems generally only write to contexts in their own subtree, unless we agree on a common context at the top level