Authenticate private root bootstrap channels
Closed
TE
3h ago+404+404+012345678901234567890123456789-2-2-0123456789
Authenticate private Linux bootstrap channels between the root host and its actual daemon child, including the selected work UID and kernel start identity. Ordinary same-user admission stays unchanged, and dropping the root owner preserves the daemon.
Hosted Linux passes four privileged cases, one ordinary control, fmt/Clippy and Rust 1.91; macOS is pending. Baseline reproduced both UID-boundary failures. Bootstrap delivery and the supervised receiver remain follow-ups.
Changelog
none