Module installation 

Protected installation snapshots. No process execution, daemon access or authority minting. Callers must keep/revalidate held descriptors through spawn.

Structs

InstallationSnapshot

Revalidated installation facts for Core request construction. These facts confer no dispatch authority; the host still requires a durable journal token.

VerifiedInstallation

A held file snapshot, not a runnable host or mutation capability.

Functions

parse_protected_inputs

Adapter entry supplies inherited fd3/fd4 as borrowed files and bounded stdin. No descriptor/path is opened from the environment and no engine I/O occurs.