Fence saved receiver tokens across process restarts

Closed
TE
8d ago
+1906-185

Fences saved Native link tokens to one receiving attempt while retaining the original keys. Machine power transitions close the stored READY record; a current closed policy retires its receiving child so root can supply a fresh generation. Stale reads cannot retire newer authority.

At 4ca7f70a7f4, Linux verification passed 148 receiver tests and all 14 privileged process cases. Backend verification passed 1,147 API and six transport tests. macOS, suspend/clone fencing and live Cloud dogfood remain.

Changelog

none