pub const V1_FLAG_ENV: &str = "WM_LANDLOCK_V1";Expand description
Environment knob: WM_LANDLOCK_V1=1 enables the per-tool pathway.
Strict parse (exactly 1), mirroring WM_LANDLOCK. Off by default:
v0 whole-process confinement and v1 per-tool confinement are separate
deployment decisions.