Keep gloved in a systemd-owned supervisor leaf while creating sibling session cgroups under the empty delegated parent. Under mapped-root supervisors, attach blocked children before releasing their existing start gate instead of combining nested UID mapping with CLONE_INTO_CGROUP. |
||
|---|---|---|
| .. | ||
| prompts | ||
| architecture.md | ||
| build.md | ||
| client-adoption-matrix.md | ||
| future-work.md | ||
| host-setup.md | ||
| hostile-content-analysis.md | ||
| managed-client-setup.md | ||
| quickstart.md | ||
| session-policy.md | ||
| threat-model.md | ||
| validation-surface.md | ||