Bounded portable native-project artifacts. Reading requires an independent
expected manifest digest and performs no native/toolchain discovery.

Audited positive task-free profile. Descriptors are metadata, not artifact authority.

Explicit external Linux producer bundle. SDK pins independently authorize its
helpers; bundle self-description alone never authenticates native producers.

Bounded exact UTF-8 and JSON parsing shared by the native source producer.

Actual native build receipt issuer. Definition load does not launch processes.
Load once: issued receipt identities survive only in this namespace cohort.

Internal source/compiled-module preparation. No artifact, entry or READY
Project is issued here. Uses the fixed compiler's monitored native transport.

Shared bounded native producer transport. Loaded only by explicit source
compilation; precompiled artifact loading does not initialize this service.

Internal adapter for the packaged canonical Java interpreter. These wrappers
prepare trusted original rows and drive its existing ownership protocol; they
do not authenticate source bytes, infer Lean types or establish Init startup.
No research interpreter, benchmark, runtime javac or source checkout is used.

Original occurrence-metadata and body-call Header borrowing checks.

Private issued Project leases behind the Java facade. No raw guest values,
native producer receipts or mutable engine aliases cross that facade.

Combined program publisher over actual native build receipts. No process launch.

Interpreted startup ledger; only the fixed research publisher currently issues Prepared.