fix(iframe): [PKG-IFRAME-03] release failed setup and bind message peers

refactor/risks.json

@@ -3775,7 +3775,7 @@
       ],
       "status": "open",
       "confirmation": "reproduced",
-      "compatibleResolution": "Request ownership checkpoint fixes timestamp collisions, polling/send failures and terminal destruction while preserving public resove/registry/envelopes. Navigation/reinjection and setup failure cleanup remain for PKG-IFRAME-03; keep open until complete actual iframe lifecycle acceptance.",
+      "compatibleResolution": "Owned requests fix collision/polling/send/destroy failures; connection cleanup now releases partial construction and cancels requests even if listener removal fails. Navigation/reinjection and document-generation handling remain for PKG-IFRAME-03; keep open until complete actual iframe lifecycle acceptance.",
       "closureCriteria": "Old behavior and candidate fixes have deterministic race/resource tests plus actual iframe integration.",
       "evidence": [
         "refactor/baselines/iframe-contract.md",
@@ -3784,7 +3784,9 @@
         "refactor/baselines/iframe-behavior-validation.json",
         "refactor/changes/2026-09-12-PKG-IFRAME-02-behavior.md",
         "refactor/changes/2026-09-12-PKG-IFRAME-03-requests-checkpoint.md",
-        "refactor/baselines/iframe-requests-checkpoint.json"
+        "refactor/baselines/iframe-requests-checkpoint.json",
+        "refactor/changes/2026-09-12-PKG-IFRAME-03-boundaries-checkpoint.md",
+        "refactor/baselines/iframe-boundaries-checkpoint.json"
       ]
     },
     {
@@ -3796,14 +3798,17 @@
       ],
       "status": "open",
       "confirmation": "reproduced",
-      "compatibleResolution": "Treat message origin/source and executable commit as an explicit compatibility and trust-boundary decision; do not silently replace the protocol during TS conversion.",
+      "compatibleResolution": "ADR-025 binds native messages to the selected iframe/parent and rejects malformed envelopes while preserving local receiver calls and same/cross/redirect/opaque origins. Executable commit still trusts the embedding parent and selected content; navigation/document generation and complete integration/release review remain open.",
       "closureCriteria": "Controlled and real same/cross-origin evidence plus an explicit documented compatibility decision and supported trust model.",
       "evidence": [
         "refactor/baselines/iframe-contract.md",
         "refactor/baselines/iframe-release.json",
         "refactor/changes/2026-09-12-PKG-IFRAME-01-contract.md",
         "refactor/baselines/iframe-behavior-validation.json",
-        "refactor/changes/2026-09-12-PKG-IFRAME-02-behavior.md"
+        "refactor/changes/2026-09-12-PKG-IFRAME-02-behavior.md",
+        "refactor/changes/2026-09-12-PKG-IFRAME-03-boundaries-checkpoint.md",
+        "refactor/baselines/iframe-boundaries-checkpoint.json",
+        "refactor/iframe-message-boundary.md"
       ]
     },
     {