Use the closest DNS encloser for wildcard synthesis

A wildcard at the zone apex answers below an existing branch that has no wildcard of its own. Restore closest-encloser semantics, including empty nonterminal names and exact owners without the requested record type.

Work with the stack you want to practice. Your workspace and timer start after you choose.