• Binder error reply format — Aligned EX_SERVICE_SPECIFIC wire layout with AOSP Status.cpp, including the remote stack trace header field.
• Key enumeration — Corrected list_past_alias pagination order to match AOSP database.rs semantics.
• KeyMetadata fields — Generated key responses now include modificationTimeMs, Tag.ORIGIN, and normalized KeyDescriptor fields per AOSP Keystore2.
• Parcel handling — hasException() preserves reply position for downstream consumers.

---