Creates scoped runtime filesystem structures with fail-closed permissions.
Ownership and boundaries
Not a secret issuer, application process, or generic runtime administrator.
Connected roles
Services requiring approved mounted volumes.
Contract status
Owner-local contract proposals; complete integration and production verification not established.
For the owner-specific contract summary, see Interfaces. For platform-wide dependencies, see Interface map.