Add a root-supervised VM receiver
Closed
TE
1d ago+3056+3056+0123456789012345678901234567890123456789-86-86-01234567890123456789
Adds a Native VM receiver through authenticated root startup and the VM’s original protected identity. The daemon closes ingress and waits for the receiving child to drain and exit before acknowledging stop. Both private processes protect their descriptors and memory maps from same-user inspection. Default startup stays lifetime-only.
Verification at 12e79e7a8b7 passed 135 receiver tests, 11 privileged process cases, fmt/Clippy and Rust 1.91, including original producer delivery/cancellation, encrypted traffic, replay refusal and stop/reap. Producer tests use synthetic HTTP replies. macOS is queued; live Cloud verification remains before activation.
Changelog
none