fix(evm-wallet-experiment): use correct delegator vat name in setup scripts and docs

The delegator vat was renamed from `delegation` to `delegator` (and its
bundle from `delegation-vat.bundle` to `delegator-vat.bundle`) in PR #939
when `coordinator-vat` was split. The setup scripts and the setup guide
were not updated, so they configure a vat key (`delegation`) the home
coordinator doesn't read at bootstrap (`vats.delegator` is undefined) and
reference a stale bundle artifact that `yarn build` no longer produces.

Also brings the README's endowment description in line with the current
globals list and adds a note to Recent Improvements summarizing this PR's
direction.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: sirtimid

packages/evm-wallet-experiment/README.md

@@ -688,7 +688,7 @@ const config = makeWalletClusterConfig({
 const { rootKref } = await kernel.launchSubcluster(config);
 ```
 
-The configuration creates four vats (`coordinator`, `keyring`, `provider`, `delegation`) and registers the coordinator as the bootstrap vat. The `keyring`, `provider`, and `delegation` vats receive `TextEncoder` and `TextDecoder` as globals since they perform binary encoding.
+The configuration creates four vats (`coordinator`, `keyring`, `provider`, `delegator`) and registers the coordinator as the bootstrap vat. Every vat receives `TextEncoder` and `TextDecoder` for binary encoding. The `keyring` and `delegator` vats additionally receive `crypto` for secure random generation (throwaway keys and delegation salts). The `coordinator` vat receives `Date` and `setTimeout` for on-chain confirmation polling.
 
 ## SES Compatibility
 
@@ -846,6 +846,7 @@ The package exports chain contract addresses used by the Delegation Framework:
 - **Error handling** -- Decryption with a wrong password now returns a clear error message. EIP-7702 gas estimation failures are no longer silently swallowed for all error types.
 - **Timer cleanup** -- The internal `raceWithTimeout` helper (used for peer communication timeouts) now properly cleans up timers to prevent resource leaks.
 - **SES lockdown compliance** -- Module-level counters (`bundlerRequestId`, `rpcRequestId`) have been moved into per-client-instance closures, eliminating shared mutable state that conflicts with SES lockdown requirements.
+- **Explicit vat endowments** -- Throwaway keyrings and delegation salts now use `crypto.getRandomValues` directly, enabled by adding `crypto` to the `keyring` and `delegator` vats' globals. Removes the prior caller-supplied `entropy` escape hatch and the counter-based salt fallback.
 
 ## Disclaimer
 

packages/evm-wallet-experiment/docs/setup-guide.md

@@ -468,16 +468,16 @@ yarn ocap daemon exec launchSubcluster '{
       },
       "keyring": {
         "bundleSpec": "packages/evm-wallet-experiment/src/vats/keyring-vat.bundle",
-        "globals": ["TextEncoder", "TextDecoder"]
+        "globals": ["TextEncoder", "TextDecoder", "crypto"]
       },
       "provider": {
         "bundleSpec": "packages/evm-wallet-experiment/src/vats/provider-vat.bundle",
         "globals": ["TextEncoder", "TextDecoder", "fetch", "Request", "Headers", "Response"],
         "network": { "allowedHosts": ["<chain>.infura.io", "api.pimlico.io", "swap.api.cx.metamask.io"] }
       },
-      "delegation": {
-        "bundleSpec": "packages/evm-wallet-experiment/src/vats/delegation-vat.bundle",
-        "globals": ["TextEncoder", "TextDecoder"],
+      "delegator": {
+        "bundleSpec": "packages/evm-wallet-experiment/src/vats/delegator-vat.bundle",
+        "globals": ["TextEncoder", "TextDecoder", "crypto"],
         "parameters": { "delegationManagerAddress": "0xdb9B1e94B5b69Df7e401DDbedE43491141047dB3" }
       }
     }

packages/evm-wallet-experiment/scripts/setup-away.sh

@@ -380,8 +380,8 @@ CONFIG=$(BUNDLE_DIR="$BUNDLE_DIR" DM="$DELEGATION_MANAGER" RPC_HOST="$AWAY_RPC_H
           globals: ['TextEncoder', 'TextDecoder'],
           platformConfig: { fetch: { allowedHosts: hosts } }
         },
-        delegation: {
-          bundleSpec: bd + '/delegation-vat.bundle',
+        delegator: {
+          bundleSpec: bd + '/delegator-vat.bundle',
           globals: ['TextEncoder', 'TextDecoder', 'crypto'],
           parameters: { delegationManagerAddress: dm }
         }

packages/evm-wallet-experiment/scripts/setup-home.sh

@@ -345,8 +345,8 @@ CONFIG=$(BUNDLE_DIR="$BUNDLE_DIR" DM="$DELEGATION_MANAGER" RPC_HOST="$RPC_HOST"
           globals: ['TextEncoder', 'TextDecoder'],
           platformConfig: { fetch: { allowedHosts: hosts } }
         },
-        delegation: {
-          bundleSpec: bd + '/delegation-vat.bundle',
+        delegator: {
+          bundleSpec: bd + '/delegator-vat.bundle',
           globals: ['TextEncoder', 'TextDecoder', 'crypto'],
           parameters: { delegationManagerAddress: dm }
         }