docs: audit extended attribute endpoints

AI.md

@@ -11,18 +11,18 @@ When the user says this is a new chat or asks to continue mars-nwe work, first
 read this file before proposing patches or making assumptions.  Then ask for, or
 use, the current project status that the user pasted into the chat.
 
-## Current handoff status after patch 0207
+## Current handoff status after patch 0208
 
 The current accepted patch line in this chat is expected to include:
 
 - endpoint-audit/documentation patches through `0176-docs-audit-direct-lifecycle-buffer-endpoints.patch`;
 - redesign documentation patches `0177` through `0198`;
-- endpoint-audit/documentation patches `0199` through `0207`;
-- latest expected patch name: `0207-docs-audit-existing-source-stub-coverage.patch`.
+- endpoint-audit/documentation patches `0199` through `0208`;
+- latest expected patch name: `0208-docs-audit-extended-attribute-endpoints.patch`.
 
 When continuing in a new chat, first ask the user which patch was actually last
-applied.  If they confirm `0207`, build the next patch as `0208-...` against a
-tree that already contains `0207`.  If any patch failed or was skipped, rebuild
+applied.  If they confirm `0208`, build the next patch as `0209-...` against a
+tree that already contains `0208`.  If any patch failed or was skipped, rebuild
 against the last confirmed applied patch instead of assuming the file in
 `/mnt/data` was accepted.
 
@@ -195,6 +195,19 @@ Schema/import direction:
   not blindly copy code into mars-nwe.  Use as a reference and implement a
   mars-nwe-native importer/OID module.
 
+
+Latest endpoint audit note:
+
+- Patch `0208` audits `NCP 0x2222/86` / wire `0x56` Extended Attributes.
+  `nwconn.c` forwards requestdata starting at the EA `SubFunction` byte to
+  `handle_func_0x56()` in `src/namspace.c`.  SDK subfunctions `86/01` through
+  `86/05` are all present in source, so no new disabled source stubs were
+  needed.  The current handlers are compatibility shims: close/write mostly
+  return success without storage, read returns an EA-not-found body, enumerate
+  returns a fixed zero body, and duplicate remains unknown request.  Next patch
+  should be `0209`; a likely next block is `0x2222/87` Name Space unless the
+  user chooses another family.
+
 ## Patch workflow
 
 - Produce patches that apply with exactly: