Review update (September 25, 2026): The merged September 25 source rejects ambiguous/dot-segment scopes and mismatched ARM response identities, uses explicit managed identity with closed SDK clients, and moves synchronous operations off the async โฆ