EDEN 100.3.172 — Validation Report

Changes:
- Member identity/proof commands now run before generic group handlers, preventing reply rules, AI, or other group consumers from swallowing a normal member's `اصل` reply.
- For ordinary human-authored messages, Telegram `from.id` is used before looking up stale proof bridge mappings. Bridge mappings are prioritized only for bot-authored copied messages.
- Command normalization is unified; bot-addressed variants such as `/اصل@BotUsername` are normalized before matching.
- Existing semantics are retained: reply + `اصل` / `اصل اصل` returns the replied-to member's approved proof in the group; reply + `اصل من` returns the requester's approved proof.

Static validation:
- PHP lint: all PHP files passed.
- update.json parses and all listed paths exist without duplicates.
- ZIP integrity check passed.
- Focused source checks confirm early dispatcher priority, target identity precedence, and `/اصل@BotUsername` normalization.

Limitations:
- No live Telegram Bot API or production database test was performed.
- If the bot does not receive the ordinary text update at all, promote it to group admin or disable Privacy Mode with BotFather; `/اصل` can be used as a slash command as a workaround.
