sim-platform-linux

Private Linux mechanics shared by declared platform capsules. All native paths and portal operations enter as explicit, preopened inputs; the crate never shells out, reads ambient environment, or probes a fallback.