WEIHR Sovereign Resolver

Drop-in replacement for https://dns.google/resolve and https://cloudflare-dns.com/dns-query. Same query shape, same application/dns-json response format.

GET /resolve?name=bridge.pops.mobi&type=A

Every lookup is logged internally so POP contributors can review what the public internet actually resolves for POP domains without depending on an external provider's cache or log retention.

Admin actions (log review, pin overrides, forced flush) require a WARDEN-verified -0- identity under the resolver:admin policy. See weihr/protocols/ext/sovereign_resolver_manifesto.md.