Spec, kernel, tests and Security Considerations updated per the thread: ethereum/ERCs#2076 (“Update ERC-8444: descriptor adoption after controller change”, merged). The Sepolia reference deployment has been redone on the updated kernel (0x126795eCa2A10ea5B2d065a8049e01B6fcDAaa78, Sourcify exact match) with the scenario on chain: the skill record was registered by its holder with a descriptor that already named the transferee, the transfer left it unadopted (withheld from search, inspectable with value:adopted: false), and one updateDescriptor with the same hash by the new controller adopted it. Transactions and both gateway states: docs/sepolia-evidence.md in the repository.